Collaborate Disseminate
Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it.
This week is full of that kind of damage. Not loud. Not clever. Just small gaps … Continue reading ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears the first alert.
Th… Continue reading AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, … Continue reading Summer of Clearinghouses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy.
According to a new report published by the Threat Hunter Team… Continue reading GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public.
The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the M… Continue reading Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it’s enabled by default.
“You can also @-mention Instagram accounts in the Meta AI app to bring … Continue reading Meta’s New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead.
That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “… Continue reading Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on… Continue reading GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains.
The activity da… Continue reading Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders.
The agents are not malicious. They just do a lot of things… Continue reading AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers