Collaborate Disseminate
Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously.
After an initial Telegram instruction, the agent found internet-facing systems and selected p… Continue reading Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing w… Continue reading Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new itera… Continue reading DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
A lot of security still comes down to trusting the wrong screen.
This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind it: reused credentials, exposed systems, quiet loa… Continue reading ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz.
Wiz, which codenamed the chain CosmosEsc… Continue reading Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft.
In his… Continue reading Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively st… Continue reading The Network Has Become the Control Plane for AI Security
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors … Continue reading Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (a… Continue reading SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities… Continue reading Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation