… The group also tainted infrastructure from the web application security firm Checkmarx, hit the development server pgserve, and compromised the web app library TanStack as well as the enterprise AI platform Mistral AI. …
… The breach appears to be the work of the TeamPCP hacker group, which has compromised multiple pieces of security software with its own malicious code, then used their access from that malware to steal user credentials. …
… There could be thousands of victims, including other major AI companies, but the breach at Mercor illustrates the sensitivity of the compromised data. …
… Security experts also say that the moment presents an opportunity to address shortcomings in how software is currently developed. “For decades, we have built an enormous global industry to defend, detect, and respond to ‘vulnerabilities’—flaws and defects in software—that should never have existed … …
… Kimwolf in particular took advantage of cheap internet-connected gadgets that acted as “residential proxies” that—often unbeknownst to their owners—let hackers pivot into users' home networks to compromise devices that are typically protected behind a home router, says Chad Seaman, a principal secu… …
… Independent security researcher Johnny Franks tells WIRED that he found yet another new, active domain—a fake website written in English, capable of infecting US-based users—that was part of a DarkSword hacking campaign as late as Thursday of last week, a finding confirmed by mobile security firm i… …
… The AI race has finally entered the cybersecurity lap. After Anthropic revealed its new model, Mythos, as a unique risk to the security status quo, OpenAI announced that it, too, has a new cybersecurity strategy, and a new model to go with it—GPT-5.4-Cyber. …
… Both iVerify and Lookout say their security apps also can detect if a phone is compromised with DarkSword in the form they've observed it. …
… 4 Years in, Apple’s Pegasus-Killer Remains Undefeated, Company Says Apple says no device with its Lockdown Mode security feature enabled has ever been successfully compromised by mercenary spyware in the nearly four years since its launch. …
… Then there’s a ton of security bundles, which include services like NordProtect, Norton LifeLock, and Aura. These bring multiple security and privacy services under one roof. …