The agencies refer to the group behind the activity as WaterPlum. It targets web designers, software engineers and people working in cryptocurrency and Web3. The group ...

Researchers are offering fresh proof that AI coding agents have become a viable attack surface for threat actors seeking to steal credentials, manipulate data, and compromise development environments.

Researchers turned a public Sentry credential into remote code execution on developer machines. The agents ran the attacker's code even when told to ignore it, and EDR, firewalls and prompts all ...

North Korea's WaterPlum group stole $10.71M and infected 30,000 devices using fake coding tests. Here's how to spot the attack.

The intrusion followed the group's documented pattern of posing as technology recruiters. The targeted engineer received what ...