A malware campaign leveraging hijacked GitHub accounts has targeted thousands of repositories, using npm hooks to bypass security and steal cloud and AI credentials.
Proofpoint researcher Selena Larson warns that an overreliance on AI tools is leading to "slop" in malware and phishing campaigns, making attacks easier to detect.
AI is transforming the cyberattack landscape by increasing the volume and velocity of operations, allowing single actors to deploy agentic capabilities previously reserved for nation-state teams.
Unauthorised AI agents and prompt injection techniques pose significant risks to enterprise security and financial integrity.
Baker Tilly is notifying clients of a data breach involving Social Security numbers, while new research highlights vulnerabilities in connected cars and AI models.
