Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

A PreToolUse hook that intercepts and blocks destructive git and filesystem commands before AI coding agents run them. CC Safety Net parses command semantics — so flag reordering, shell wrappers, and ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.