The Hacker News

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...
PCMag on MSN

EncryptPro

None ...
Hackaday

Building A Wireless Fingerprint Authorization Device

Once upon a time, there was a bit of a fad for fingerprint authentication in laptops and desktop computers. It has long since ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Decrypt

China Has Its Own Mythos Now, Says Qihoo 360 Founder. And One Version Is Free

Qihoo 360 founder Zhou Hongyi says China now has its own version of Claude Mythos, a vulnerability-hunting AI called Tulong ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
GitHub

An Open-source Drug Discovery Engine

OpenDDE is a preview release. CLI flags, input/output JSON fields, and released checkpoints may change between versions, and predictions are not guaranteed to be reproducible across releases. It is ...