Fake OpenAI Repo Trended on Hugging Face Before Malware Found
May 11, 2026
A fraudulent OpenAI repository reached Hugging Face’s trending list while distributing infostealing malware targeting credentials and access tokens.
Security Spotlight
Fake OpenAI Repo Trended on Hugging Face Before Malware Found
A fraudulent OpenAI repository reached Hugging Face's trending list while distributing infostealing malware targeting credentials and access tokens.
MacSync Infostealer Weaponizes Google Ads and Claude.ai Chats
Attackers chain Google sponsored ads with fake Claude.ai chat sessions to deliver MacSync, a macOS infostealer harvesting Keychain contents and browser credentials.
Kaspersky: DAEMON Tools Backdoored in Supply Chain Attack
Kaspersky discovered DAEMON Tools versions 12.5.0.2421–12.5.0.2434 were backdoored on the official site for one month, infecting thousands across 100+ countries with a first-stage backdoor and ...
Signed, Sealed, Stolen: Hackers Used DigiCert to Certify Malware
Attackers compromised DigiCert support staff via a chat-delivered screenshot, used their access to obtain code-signing certificates, and signed Zhong Stealer malware.
When Amazon Sends the Phishing Email
Threat actors are systematically abusing Amazon SES to send phishing emails that pass SPF, DKIM, and DMARC checks — turning AWS's own email infrastructure against ...
Anthropic’s Claude Desktop Unauthorized Installations Raise EU Law Compliance Concerns
Claude Desktop's unauthorized modifications may breach EU laws on clear user consent.
Microsoft Awards $2.3 Million to Researchers in Zero Day Quest Hacking Contest
Microsoft awarded $2.3 million to researchers during this year's Zero Day Quest for discovering vulnerabilities.
Capsule Security Secures $7 Million to Protect AI Agents at Runtime
Capsule Security emerges from stealth with $7 million funding to secure AI agents.
France’s Rising Kidnapping Cases Amid Crypto Extortion Schemes
French mother and child rescued after 20-hour kidnap, exposing extortion threats tied to crypto wealth.
OpenAI Responds to Supply Chain Attack Affecting macOS Security
OpenAI confronts potential compromise of macOS code signing certificate due to North Korean-linked Axios supply chain attack.
MacSync Infostealer Weaponizes Google Ads and Claude.ai Chats
May 11, 2026
Attackers chain Google sponsored ads with fake Claude.ai chat sessions to deliver MacSync, a macOS infostealer harvesting Keychain contents and
Kaspersky: DAEMON Tools Backdoored in Supply Chain Attack
May 6, 2026
Kaspersky discovered DAEMON Tools versions 12.5.0.2421–12.5.0.2434 were backdoored on the official site for one month, infecting thousands across 100+ countries
Signed, Sealed, Stolen: Hackers Used DigiCert to Certify Malware
May 5, 2026
Attackers compromised DigiCert support staff via a chat-delivered screenshot, used their access to obtain code-signing certificates, and signed Zhong Stealer
When Amazon Sends the Phishing Email
May 5, 2026
Threat actors are systematically abusing Amazon SES to send phishing emails that pass SPF, DKIM, and DMARC checks — turning
Anthropic’s Claude Desktop Unauthorized Installations Raise EU Law Compliance Concerns
April 21, 2026
Claude Desktop’s unauthorized modifications may breach EU laws on clear user consent.
Microsoft Awards $2.3 Million to Researchers in Zero Day Quest Hacking Contest
April 16, 2026
Microsoft awarded $2.3 million to researchers during this year’s Zero Day Quest for discovering vulnerabilities.
Capsule Security Secures $7 Million to Protect AI Agents at Runtime
April 16, 2026
Capsule Security emerges from stealth with $7 million funding to secure AI agents.
France’s Rising Kidnapping Cases Amid Crypto Extortion Schemes
April 16, 2026
French mother and child rescued after 20-hour kidnap, exposing extortion threats tied to crypto wealth.
OpenAI Responds to Supply Chain Attack Affecting macOS Security
April 14, 2026
OpenAI confronts potential compromise of macOS code signing certificate due to North Korean-linked Axios supply chain attack.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.