Over 1,000 exposed ComfyUI instances exploited via unauthenticated code execution, enabling Monero mining and botnet expansion.

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

Aurora Mobile Limited (NASDAQ: JG) (“Aurora Mobile” or the “Company”), a leading provider of customer engagement and ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

More than 1000 ComfyUI servers are exposed to the internet. Attackers exploit misconfigurations to add instances to a botnet.

SOCx integrates AI Security CyberRisk Validation as its fourth active methodology alongside ACFW v2.0, WAAP v5.0, and XDR v1.0 -- First purpose-built platform to validate AI se ...

This post is adapted from a talk I gave at prompted, the AI security practitioner conference. Thanks to Gadi Evron for ...

It'll even run on a GPU with 8GB of VRAM!

Stop coding, start commanding.

DNA Script has signed distribution agreements with Gencell, Bio-Medical Science (BMS) and Biostream, expanding global access to its SYNTAX platform. Providing automated, in-house and on demand ...

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...

The multi-stage campaign targeting South Korea uses weaponized Windows shortcuts and GitHub-based command and control to ...