Posts of last few hours

GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can block a push before a credential enters repository history. How the detector works Existing checks recognize many credentials by their formats. The new classifier examines surrounding code to identify unstructured secrets, such as database passwords with … More →

The post GitHub adds AI to catch passwords before a code push appeared first on Help Net Security.

ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in ESET’s telemetry was in Ukraine: transportation companies in July and August 2025, a manufacturer in December 2025, and an energy company in June 2026. The program MATCHBOIL installs is a spying tool, and the access it creates … More →

The post What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor appeared first on Help Net Security.

Anthropic disrupted threat actors misusing its Claude models between December 2025 and August 2026, and published the case studies in […]

The post How Attackers Are Actually Using AI in 2026: Lessons From Anthropic’s Threat Report appeared first on HawkEye.

The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and billing them far more than the ransom. Zohar Pinhasi (aka “Zack Silver” and “Zack Green”), a 50-year-old US and Israeli national from Hollywood, Florida, allegedly billed MonsterCloud clients more than $19 million while paying more than $8 million to the ransomware gangs that attacked them. According to the indictment, Pinhasi told prospective … More →

The post Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims appeared first on Help Net Security.