Cybercriminals are always looking for new ways to exploit systems and evade security measures. One emerging technique that is raising…

Ever heard of a file that’s both a JPEG and a PHP script?

Aqua Security's Nautilus team discovered Koske, an advanced Linux cryptojacker likely crafted by AI, hiding in panda images and using rootkits for stealthy operations.

AquaSec uncovers Koske, a new cryptojacking malware potentially AI-generated, hiding in innocent-looking images to silently infect Linux servers and evade detection with rootkit stealth.

A misconfigured server meets a sneaky upload — turning an innocent JPG into a PHP-powered backdoor

DON’T download this image! (contains hidden malware)

This lab contains a vulnerable image upload function. Although it checks the contents of the file to verify that it is a genuine image, it…

This lab contains a vulnerable image upload function. Although it checks the contents of the file to verify that it is a genuine image, it…

Kaspersky exposed Tomiris APT using a "polyglot" strategy (Go/Rust/Python) and Telegram/Discord for covert C2. The group targets foreign ministries with implants that steal file paths and reconnaissance data.

The goal of this post is to explore the nature of polyglot files and the scenarios where they are most effective for discovering…

OpenAI's GPT-5.3-Codex is here. With 400K context, xhigh reasoning, and self-optimization, it’s the first agentic model designed to build and debug itself.