ReliaQuest observed attackers pairing ClickFix with the PySoxy proxy tool to establish redundant encrypted access paths and ...
Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ...
The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...
AI tools work well on their own, but they work best in combination ...
John Hammond is a Security Researcher at Huntress as well as a cybersecurity instructor, developer, red teamer, and CTF enthusiast. John is a former Department of Defense Cyber Training Academy ...
From a defensive perspective, AI excels at accelerating pattern recognition, automating repetitive workflows and analyzing vast ...
The attacks compromise aerospace and drone firms' systems to exfiltrate GIS files, terrain models, and GPS data to gain a clear picture of analysts' intel.
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project ...
CVE-2026-22679 exploited via debug endpoint in Weaver E-cology before 20260312, enabling RCE and system compromise.
DeepClaude swaps Claude Code's expensive Anthropic backend for DeepSeek V4 Pro, keeping the agent loop, slashing the bill.
Attackers exploit Microsoft Teams and Snow malware to steal credentials and take over enterprise networks through social engineering.