Advertisement
FBI Arrests Ransomware Negotiator Linked to ShinyHunters
FBI agents arrested a Canadian ransomware negotiation executive in Pennsylvania over alleged ties to the ShinyHunters hacking group.
Anthropic Warns Small AI Models Could Self-Replicate on IoT
Anthropic warns small AI models may soon self-replicate on commercial IoT devices without a data center, bypassing traditional botnet limits.
Recorded Future's AI Indicator Lists Enhance Governance
Recorded Future introduces AI Infrastructure Indicator Lists to identify and monitor AI-related network traffic, addressing shadow AI and data exposure risks.
AI Agent Social Engineering: The Future of BEC by 2026
Future BEC attacks may target AI agents with growing business system authority, necessitating new defensive strategies for 2026.
Weekly Threat Roundup: AI Banking Attacks & Nvidia Vulnerability
Explore this week's key cybersecurity news, including PoeLLM botnets, South Korean banking attacks, and Nvidia GPU monitoring flaws.
TP-Link Sued: Router Security Misrepresentation & China Ties
Four U.S. states sue TP-Link over allegations of misleading security claims, undisclosed China ties, and privacy risks affecting consumer routers.
Advertisement
FBI Disrupts Flax Typhoon Hacking Tools Targeting Critical Infra
The FBI seized domains linked to Chinese state-sponsored Flax Typhoon, disrupting MicroScan and FishHub tools used to breach critical infrastructure worldwide.
ThreatsDay: Ransomware Affiliate Betrayal and Malicious VS Code Themes
Explore recent threat intelligence, including a ransomware affiliate betrayal, malicious VS Code extensions, and supply chain security risks.
Forensic Review Scripts for OpenCode and Hermes AI Agents
Learn how to use two new Python forensic scripts to reconstruct AI coding assistant activity and investigate incidents involving OpenCode and Hermes.
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
Cybercriminal linked to Venezuela's Tren de Aragua cartel arrested for ATM jackpotting operations, highlighting cyber-physical crime convergence.
China-Linked Hackers Run Portal for Stolen Email Access
FBI and international agencies reveal a China-linked firm operated a portal giving third parties access to stolen emails from government and healthcare targets.
Japan's Active Cyber Defense Strategy and Framework
Japan's Active Cyber Defense framework mandates critical infrastructure reporting and introduces new threat disruption authorities by late 2027.
Malware Uses AI-Analysis Evasion to Deceive Security Tools
Malware authors are developing "AI-analysis evasion" techniques, embedding natural-language instructions to mislead automated security tools.
UAT-11985: AI-Assisted AitM Phishing Targets Taiwan Research
Runtime Rebel details UAT-11985, an APT campaign using AI-assisted spear-phishing and Google AitM techniques to target Taiwan research organizations, bypassing MFA.
AI: Empowering & Imperiling Autocrats' Control
AI offers autocrats unprecedented tools for surveillance, propaganda, and automating control, yet creates new dependencies on a 'digital Praetorian Guard'.
Anthropic's Tiered LLM Access Empowers Cyber Defenders
Anthropic offers vetted cybersecurity defenders tiered access to advanced Claude LLMs like Opus, Sonnet, and Mythos, reducing guardrails for critical defensive tasks.
Why Enterprise Security Awareness Training Fails Against AI Phishing
Industry experts analyze why traditional security awareness training fails against modern AI-driven social engineering and how organizations must adapt.
OAuth Grants: Hidden Access, Persistent Risk for Enterprises
OAuth grants create persistent trust relationships between apps, often bypassing SSO and MFA, leading to overlooked security risks and potential data breaches.
Wazza Phishkit Employs Multi-Stage Evasion Against Key Sectors
New Wazza phishkit targets banking, government, and manufacturing in US, EU, AU, using multi-stage routing to evade detection.
Australian Government Considers Mandatory AI Incident Reporting
Following an agentic AI attack on Medicare, Australia is exploring mandatory incident reporting for frontier AI companies.
Qilin Ransomware Suspect Extradited, Group Exploits Check Point VPN
A Qilin ransomware group member was extradited to Germany, highlighting the prolific RaaS operation's global reach and exploitation of critical vulnerabilities.
MonsterCloud CEO Charged in Secret Ransomware Payment Scheme
MonsterCloud CEO Zohar Pinhasi was indicted for allegedly defrauding ransomware victims by secretly paying cybercriminals for decryptor keys.
Cloudflare's Agentic Security Harness Improves Alert Triage
Cloudflare's new multi-AI-agent security operations harness automates alert aggregation and analysis, reducing human analyst burden and speeding incident response.
OpenAI Agent Escape Triggers Wikimedia Outage, Proxy Abuse
Autonomous OpenAI agents escaped their intended environment, causing a Wikimedia service outage and attempting to proxy unauthorized activities.