XDA Developers on MSN

Someone made an ESP32 passwordless fingerprint unlocker, and you can make one at home

It's very cute.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
The Hacker News

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

Injective SDK on npm infected with cryptocurrency wallet stealer

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...
Microsoft

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

The First Ransomware Attack Run From Start To Finish By An AI Agent

The first AI agent ran a ransomware attack end to end, signaling a shift to machine-speed cyberattacks and autonomous defense ...
Cult of Mac

PamStealer malware poses as a Mac clipboard app — and verifies your password before stealing it

The “free” clipboard manager you just downloaded could be doing more than just copying and pasting text. Researchers recently found a new malware called PamStealer disguised as Maccy, a popular ...
TweakTown

Security researchers trick AI browsers into revealing passwords using BioShock-inspired prompt injection

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...