Collaborate Disseminate
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for – how attackers are circumventing AI security programs by using legacy infrastructure to hijack AI a… Continue reading Stop Your Legacy Infrastructure from Hijacking Your AI Agents
It’s Monday again.
This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down security tools, and mobile malware asking for way too much control.
The annoying part is how… Continue reading ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
Canada’s spy service got a judge’s permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil and neutralize two foreign-run botnets.
The Federal Court released a public version of the ruling on June 15. It is … Continue reading Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin’s XLab calls it AryStinger and counts at least 4,300 infected routers, a … Continue reading AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new report from INTERPOL has revealed a “dramatic increase” in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in cybersecurity maturity.
… Continue reading INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific
Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites.
The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosur… Continue reading Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple’s A12 and A13 chips.
That code is burned into the silicon at manufacture. No… Continue reading Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor.
This m… Continue reading The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.
Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a privil… Continue reading AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites.
“With these actions we dep… Continue reading Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites