Malicious SIM cards can use RUN AT to execute modem commands on cellular IoT devices, including EV chargers, routers, and telematics units.

Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit ...

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning ...

Jamf Threat Labs has found Mac malware that steals sensitive data and secretly launches a controllable copy of the victim's Chrome or Safari installs, giving attackers a way into accounts that are ...

AmnesiaStealer tricks users into pasting Terminal commands from a fake GitHub page before harvesting credentials, cookies and ...

Four Claude Code agents using AgentRadio's real-time coordination beat Claude Opus 4.8 on enterprise codebase tasks, nearly ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

Malware used by North Korea's Lazarus group negotiated its command channel using a post-quantum key exchange before pulling down a Windows zero-day exploit, in a campaign against defense and aerospace ...

Researchers find standards-compliant functionality can be abused to hijack modems, downgrade connections, and even execute code ...

Standardized SIM command from the modem era lets a hostile card run code inside an EV charger ...

ClickLock Mac malware uses a fake verification page to trick users into pasting a Terminal command, then steals passwords and cryptocurrency wallets.

Jewelbug, an APT group based in China, is using a single control panel and a shared infrastructure to run both ...