New DOUBLECUP ClickFix service hides malware in browser cache images

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...
Scientific American

Two research efforts gave AI the same open problem. Their papers were submitted three hours apart

An M.I.T. Ph.D. student and two University of California system cryptographers used GPT-5.6 Sol Ultra in different ways, raising new questions about independent discovery and scientific credit ...
Microsoft

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

How quickly can you prove that you’re human? Try our quiz.

Try solving visual puzzles used to sort humans from bots and see how they’ve gotten harder as AI has gotten smarter.
Decrypt

Coldcard Bitcoin Exploit Explained: Entropy, How Keys Are Generated, and Why Bits Matter

A flaw in Coldcard wallets cost Bitcoin holders more than $100 million—and reopened an old fight about whether you can trust ...
Microsoft

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...