ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...
Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.
GopherWhisper infected 12 Mongolian government systems in January 2025, abusing Slack and Discord for C2, exposing wider ...
ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.
A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate ...
A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...
Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even ...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
Malicious browser extensions disguised as TikTok downloaders compromised 130,000 users, exposing a growing blind spot in ...