SparTech Software

Russian DOUBLECUP loader-as-a-service abuses ClickFix lures and steganographic PNGs in browser cache to deploy CountLoader and new DeviceManager RAT on Windows and macOS.

Google removed risky AI agent workflows from its ADK Python repo after Pillar Security showed a crafted GitHub issue could trigger a privileged fixer agent.

UC Riverside researchers introduced SAGA, an AI video attribution tool that traces synthetic clips back to their source models, bolstering deepfake defenses.

Researchers at security firm Jesta say a Chinese-speaking threat actor weaponized DeepSeek via Hermes Agent to build a proxyjacking network from 1,283 targets.

UK Police National Legal Database confirms a breach exposing contact records, raising concerns over risks to law enforcement and government staff.[1][2]

Thermo Fisher has shipped high-severity fixes for an Applied Biosystems flaw that let attackers quietly alter DNA analysis files, threatening case integrity.

Researchers warn of Atomic macOS Stealer infection observed August 2 amid campaigns that abuse macOS users through social engineering and malvertising.

NTU researchers uncovered 84 vulnerabilities in open-source 4G and 5G core implementations, exposing operators to DoS and session hijacking risks.

Adform's trackpoint-async.js tracking script was hijacked in a supply chain attack that swapped crypto wallet addresses across sites on July 27.

Microsoft warns Russian-linked Midnight Blizzard hijacks hotel Wi-Fi portals worldwide to push fake browser updates that install CornFlake spyware on travelers.