Cisco Talos exposed malicious threats disguised as AI tool installers that target users and businesses across various sectors. These threats, including CyberLock and Lucky_Gh0$t ransomware types and a new destructive malware called “Numero,” exploit the growing use of AI in industries like B2B, tech and marketing. The criminals use tactics such as SEO poisoning, manipulating search engine outcomes and using platforms like Telegram to disseminate these fraudulent installers. Cisco Talos encouraged users to ensure the credibility of AI tool sources.

Backdoors in Python and NPM Packages Target Windows and Linux
A new cybersecurity threat has been discovered by Checkmarx Zero, which aims at Python and NPM users on both Windows and Linux systems. The attackers