blog

Patrick Wardle, one of the best-known researchers in macOS security, published a working proof of concept on September 21 for Meta Muse, Meta’s personal AI assistant that launched on Mac just weeks earlier. The…

A newly documented remote access trojan called ChainScript is spreading through ClickFix-style lures disguised as Spotify, Zoom, and Microsoft Teams installers. The interesting part isn’t the trojan itself, it’s how it finds its command…

In May 2026, Google’s Gemini gained access to a real, currently operating company during a security evaluation exercise — not a sandbox, not a mock target, an actual business with actual data. The cause…

Most credential-stealing malware has a boring business model. Steal logins, dump them on a stealer log shop, get paid in bulk pennies per record. The operator behind a campaign called PhantomRaven skipped that step…

There is one number that describes what is happening in offensive security better than any amount of talk about the “AI era.” It is the time from vulnerability disclosure to first mass exploitation. A…

A human attacker, no AI, went from Marimo RCE (CVE-2026-39987) to an SSH bastion and AWS in 8 seconds, dodging a honeytoken built to catch AI agents.

The AgentOffense team slipped 10 plugins with vulnerable updates past WordPress review — all 10 passed. Now WordPress auto-scans every release. What changed.

Anthropic’s 2026 threat report: attackers use Claude for autonomous recon, exploitation, data theft and self-rebuilding malware. What it means for defense.