Cybercriminals are increasingly hijacking Node.js, the widely used JavaScript runtime, to slip malicious code past security defenses, according to new findings from the Symantec Threat Hunter Team. Since February 2026, multiple threat actors have abused the legitimate, digitally signed tool to execute malware while evading detection, with victims spanning government departments, technology firms, and hotels...Read More
What This Story Is About A new phone scam involving a fraudulent claim from Apple Pay that attempts to trick recipients into providing personal information over the phone. Why It Matters Law enforcement agencies are continuously warning residents of new online or phone scams. The schemes often target the elderly. What Happens Next Cybersecurity agents...Read More
The OpenAI-Hugging Face incident was a wake-up call for cyber defenders. During an internal cybersecurity evaluation, AI agents identified paths beyond their intended environment and accessed production infrastructure belonging to a third-party organization. The incident highlighted a challenge security teams increasingly need to prepare for: capable AI agents can identify weaknesses, connect multiple gaps and...Read More
Content warning: this investigation addresses sensitive topics related to the sexualization and sexual abuse of minors. Unawareness, social pressure and the search for validation: these are the factors that make children more vulnerable on TikTok, the social media platform where they spend the most time A girl uploads a video to TikTok saying she is...Read More
What you need to know GPT-6 Astra is the first OpenAI model to hit the “critical” cybersecurity threat level, but deployment is moving forward with significant safeguards in place. It is currently limited to defensive tasks like secure code review. Advanced capabilities like exploit creation are blocked for now, but trusted users in the Daybreak...Read More
This week, cybersecurity shifted further from an IT concern to a strategic requirement for the broader digital economy. More than 100 technology companies called for stronger defenses against AI-enabled attacks, while CrowdStrike’s results showed growing enterprise spending on AI security. WSO2’s self-managed AI platform also reflected rising demand for greater control over models, agents, data...Read More
[Photo: Google Gemini] As AI spreads, security companies in South Korea and abroad are stepping up moves to expand AI-powered security products to respond to related threats. CrowdStrike said at its annual conference that it added an identity framework for AI agents, parallel security investigations and a feature to preemptively block malicious open-source packages to...Read More
European lawmakers have called on the European Commission to force Meta to implement the same child safety measures on its platforms in Europe that the tech giant recently agreed to introduce in parts of the United States. A letter signed by 52 members of the European Parliament (MEPs) and seen by AFP on Thursday urges...Read More
A man accused of using social media to lure more than 80 children throughout the United States and induce them into performing sexual acts was convicted last week in Sacramento Superior Court. When Demetrius Carl Davis was arrested in April 2022, he was charged with 32 felony counts of committing a lewd or lascivious act...Read More
James Woods died by suicide after an online predator blackmailed him. His story is now fueling a federal bill and an urgent warning for parents this school year. CLEVELAND — In 2022, 17-year-old James Woods of Streetsboro, Ohio thought he was talking to a girl his age on Instagram. Within hours, the conversation turned to...Read More
