Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners

Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities

Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program. The post Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities appeared first on SecurityWeek.

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

LLM Voice

Yoba malware hides in fake desktop versions of ChatGPT and Claude

Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, for the past two months. Its operator set up repositories and GitHub.io pages for supposed apps called GPT-5.6 Sol, GPT-6 Astra and Claude Opus, and hosted the malware as ZIP releases o…