Results for “"sign"”
1–10 of 2,496 articles
Best match · title matches first
The Register
7 hours ago
Linus Torvalds sees signs AI-prompted patch flood has peaked
Fixes are arriving faster than new bug reports for one major Linux project
ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1–10 of 2,496 articles
Best match · title matches first
The Register
Fixes are arriving faster than new bug reports for one major Linux project
The Register
Team given a day's notice faced distressed callers, safeguarding decisions during project that stretched from 2 weeks to 11
The Hacker News
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called
Check Point Research
Key Points Introduction Over the past two months, we have been tracking a campaign that abuses the popularity of AI tools such as ChatGPT and Claude to spread a custom malware chain we call Yoba. The attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude […] The post appeared first on . Tricks from the Past deployed via signed ChatGPT and Claude binaries Check Point Research
The Hacker News
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor
The Register
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
The Hacker News
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed
The Register
We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
The Hacker News
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer's own access. Anomaly, the company behind OpenCode, fixed the flaw in version 1.18.33 on September
Dark Reading
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.