The Hacker News

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...
SecurityWeek

Agentic AI Used to Conduct Ransomware Attack via Langflow

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...