Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

DNA origami turns secret messages into nano–Morse code that acts as multiplayer molecular encryption

Mathematics has always been at the core of securing information. From online banking to government communications, modern ...
Smithsonian Magazine

Elizebeth Smith Friedman was the U.S. Government’s First Woman Codebreaker. She Cracked Nazi Codes, Saved 8,000 Lives, and Pioneered Modern Codebreaking.

For decades, Elizebeth Smith Friedman worked in near-total secrecy, cracking codes that shaped the outcome of two world wars. Recently declassified, the full extent of her story is still coming to ...
Scientific American

Mathematicians still don’t know the fastest way to multiply numbers

This requires an algorithm: students are taught to stack one number atop another and multiply each digit of the bottom number ...
Redmondmag.com

Sysdig Details Autonomous AI Agent Behind Ransomware Attack

Cloud security firm Sysdig has documented what it says is the first ransomware attack carried out from initial exploitation through encryption by an autonomous AI agent, without a human directing each ...

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

AI Ransomware Is Here, Now Powered By Cheaper, Agentic Models

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...
Microsoft

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
techtimes

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...
TMCnet

ESET Threat Report: AI boosts cyber attackers' efficiency

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026. ClickFix – a social engineering technique leveraging fake error messages – has expanded into ...