SmartLoader campaign spreading StealC via a trojanized Oura MCP server using fake GitHub forks to steal credentials and crypto funds.

ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software ...

While the AI itself wasn’t weaponized, the technique raises concerns about AI agents with broad system access.

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.