Collaborate Disseminate
A Canadian man is facing decades in prison for hacking customer accounts at cloud storage provider Snowflake and stealing data from more than 165 organizations. Connor Riley Moucka, also known as “Waifu” and “Judische,” 26, of K… Continue reading Snowflake hacker pleads guilty, faces up to 32 years in prison
More than half a dozen services advertised on underground forums and messaging platforms, offering discounted or “unlimited” token access to frontier AI models, were discovered by Okta. Okta believes the trend is likely driven by Chinese us… Continue reading Discounted Claude access bought on the gray market may expose every prompt you send
Cybercriminals are cloning popular GitHub repositories for AI tools and developer resources to distribute an infostealer, according to Netskope Threat Labs. (Source: Netskope) Netskope came across the campaign while tracking a Windows-based MaaS infost… Continue reading AI developers targeted via trojanized GitHub repositories
Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft Threa… Continue reading Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware
Europe’s fight to regulate AI models moved from paper to practice on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. On the same date, new transparency rules took effect, requirin… Continue reading EU begins enforcing AI Act, putting AI models under the microscope
Scammers are sending physical letters to cryptocurrency holders that copy the look of official IRS notices. The letters tell recipients they must enroll in something called a Digital Asset Compliance Portal before a deadline, or risk penalties. “If you… Continue reading Fake IRS letters direct crypto holders to bogus compliance portal
A Chinese threat actor operating under the aliases “knaithe” and “KnYuan” used multiple LLMs to automate cyberattacks against internet-facing systems with limited human intervention. Researchers at Palo Alto Networks’ Unit… Continue reading Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers
A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses preinstal… Continue reading Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire
Anthropic has disclosed that its AI model Claude gained unauthorized access to the systems of three different organizations during cybersecurity evaluations. The disclosure follows OpenAI’s July 21 announcement that some of its models had escaped… Continue reading Anthropic’s Claude breached three companies during security tests
Attackers are moving away from fake Microsoft login pages in favor of abusing Microsoft’s own authentication system, letting phishing campaigns slip past the warning signs employees are trained to spot, according to Check Point. Between June 25 a… Continue reading Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks