A new attack method called 'SmartAttack' exploits smartwatches to covertly exfiltrate data from air-gapped systems by using ultrasonic signals emitted from a compromised computer's speaker. Researchers highlight the attack's reliance on malware to gather sensitive information, which is then transmitted to nearby smartwatches that can decode the signals. To mitigate this threat, it is recommended to prohibit smartwatches in secure environments and consider hardware modifications to air-gapped systems.

Researchers discovered 60 malicious packages on NPM designed to collect sensitive host and network information, sending it to a Discord webhook. These packages, which were uploaded under misleading names, posed a significant risk for targeted network attacks, and although reported, some remained available for download at the time of writing. Additionally, another campaign involved eight typosquatting packages capable of deleting files and corrupting data, which had been present on NPM for two years.

A new type of ransomware has been discovered that utilizes artificial intelligence, marking a significant advancement in cybercrime. This AI-powered malware can exfiltrate data, encrypt files, or even destroy them, posing a serious threat to individuals and organizations alike. Experts are warning that the integration of AI into ransomware could lead to more sophisticated attacks in the future.