Resilient It

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing -

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude Code and OpenClaw.

StegoAd: How 119 Fake Browser Extensions Stole Credentials and Ran Ad Fraud for Two Years -

StegoAd: How 119 Fake Browser Extensions Stole Credentials and Ran Ad Fraud for Two Years Microsoft shut down the StegoAd campaign, which used 119 malicious Edge extensions, hit 2.6M installs, and ran undetected for two years.

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers -

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers Infoblox found 236,493 DCloud Uni-App domains powering crypto scams, WhatsApp phishing, fake gambling sites, and wallet drainers.