AI chatbots, including ChatGPT, Claude, and Gemini, were all too willing to validate and hype up their users, a new Stanford study showed.

Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan

Apple introduced an extra layer of protection against ClickFix attacks, only for macOS Tahoe 26.4 and later

A list of topics we covered in the week of March 23 to March 29 of 2026

Not a real phone, but good enough to fool your bank. Researchers warn criminals are using virtual devices to bypass fraud checks.

A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto wallets.

A new macOS infostealer, NukeChain (now Infiniti Stealer), uses fake CAPTCHA pages to trick users into running malicious commands.

It hides inside developer tools, then monitors activity and steals data, turning a single infection into a wider risk across the supply chain.

Courts are starting to question how platforms are built, not just what’s posted.

A hacktivist group claims to have obtained sensitive data on crime tipsters and the people they reported, dating back to 1987.