Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools

Slopsquatting represents an emerging supply chain threat made possible by AI hallucinations. As developers increasingly rely ...
SecurityWeek

GigaWiper Combines Multiple Malware for System-Level Sabotage

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...
ADTmag

Java Ecosystem Advances with Strict Field Initialization JEP Amid Cross-Platform Malware Threats

The global Java development ecosystem experienced significant structural changes this week following the introduction of a new OpenJDK enhancement draft alongside warnings from cybersecurity ...
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
The Hacker News

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and ...

CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin

EXCLUSIVE There's no honor among thieves as a new worm steals from other infectious software. It pilfers “multiple” victims’ ...
Dark Reading

'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...
Tech Times

New APT Group Hits Power Grids in Three Countries with AI-Crafted Malware

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

AI-Powered Armored Likho Hackers Target Governments, Power Sector in Global Cyber Campaign

Armored Likho, a new APT group using AI-generated malware and the BusySnake Stealer to target government agencies and power ...
GitHub

Noriben Malware Analysis Sandbox

Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, it allows you to run ...