Collaborate Disseminate
Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and… Continue reading Tech Support Scam Kit Uses Google Ads to Deliver Fake Security Alerts
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam… Continue reading Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor. Continue reading ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks
FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs. Continue reading SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data
An OpenAI agent bypassed controls on Australia’s Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months. Continue reading OpenAI Agent Breached Australian Medicare Statistics Portal
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication. Continue reading Microsoft Password Reset Portal Can Leak Account Verification Details
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure. Continue reading New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across compromised retail sites. Continue reading Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records
RatHat Android malware uses generative AI to navigate infected devices, steal banking credentials, intercept OTP codes and reinstall itself after removal again. Continue reading RatHat Android Malware Uses AI to Target Banking Credentials in Real Time
MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate command-and-control infrastructure. Continue reading MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide