Dysphoria adds blockchain C2 and victim relays after the JackSkid disruption, keeping controllers one step removed from ...

IoT botnet Dysphoria has infected over 200,000 devices, hiding command servers on Ethereum and Solana blockchain domains.

Tengu abuses Linux hardware watchdogs to reboot devices after its main process is killed, letting other persistence ...

Security researchers at Nozomi Networks Labs have disclosed a previously unknown IoT botnet, named Tengu, that turns one of embedded hardware's most fundamental safety features against the people ...

Dysphoria botnet, a new IoT threat that emerged six days after a major March 2026 law enforcement takedown, uses Ethereum and ...

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various objectives not previously possible with prompt injections. Large ransomware ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. The AI agent responded to the attacker's ...

New security research offers a rare view inside residential proxy networks, which rely on apps that share a person's internet ...

Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents ...

Researchers discovered Samsung smart TV apps quietly turning millions of devices into residential proxies, prompting Samsung ...

Researchers find nine of the most popular AI platforms are susceptible to a new attack that exploits hallucinations to set up a botnet.

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...