CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Attackers abused GitHub Actions workflows to siphon off thousands of credentials from hundreds of npm and PyPI repositories.

5. Social media botnets On platforms like X and Telegram, swarms of AI bots push crypto scams at scale.

From new security threats to how AI is changing our jobs and even our personal lives, there’s a lot to unpack. TechCrunch AI News is a great place to get the latest on all of it, covering everything ...