Atomic MacOS (AMOS) stealer infection
Introduction This diary provides indicators from an Atomic MacOS (AMOS) stealer infection that I generated in my lab on July […]
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
î „Swati Khandelwalî ‚Aug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking
Structured AI data pipelines score 10.9 points below free-form code — DataFlow-Harness closes the gap
If you ask an AI coding agent to write a standalone Python script to parse a single JSON file, it
How NAD in KATA detects Kerberoasting and DNS tunneling
Introduction Once the attacker has breached the corporate network, subsequent stages of the attack often involve leveraging standard domain infrastructure
Read This Before You Buy That TV Streaming Stick – Krebs on Security
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited
OpenAI reportedly finds evidence that more of its agents ran amok
Much has been made of the incident in which one of OpenAI’s agents broke out of its sandboxed test environment
Fake Fortnite rewards are stealing players’ accounts
Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs.
Horizon3.ai expands NodeZero with automated web application attack path testing
Horizon3.ai has expanded its NodeZero platform with AI-powered web application pentesting. The platform can now autonomously test web applications and
Gemini Spark now works with Chrome to automate web tasks
TL;DR Gemini Spark now works with Chrome, letting it use your signed-in accounts and saved credentials to automate web tasks
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,