Collaborate Disseminate
Phishing has always been a numbers game. AI has turned it into a volume machine.
Attackers can now create convincing emails, fake login pages, and tailored lures in minutes. Every polished message adds another case for Tier 1 to review, another link t… Continue reading AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
Mythos is real. I know a big chunk of the industry thinks it’s a marketing stunt, and I get why. I get it. But I’ve seen the findings, and they’re bad. These aren’t “whoops, this line right here is wrong, and that’s RCE.” They’re novel combinations of … Continue reading The Hardest Fork
A China-nexus cyber espionage group has been observed deploying a BSD variant of a known backdoor called BRICKSTORM, as well as two other malware families codenamed PLENET (aka GRIMBOLT) and AGENTPSD to target Linux systems.
The activity has been attr… Continue reading VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across professional, legal, and financial services in the U.S. between January and May 2026.
The activi… Continue reading UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Microsoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in an attempt to tackle software supply chain threats…. Continue reading VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts to reduce the risk of data exfiltration arising from prompt injection attacks.
The feature is primarily designed for people and organizations that handle sensit… Continue reading New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into exit nodes that relay web-scraping traffic for a data business Bright Data markets heavily… Continue reading Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active ex… Continue reading CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg, the media library inside almost everything that touches video, all of them found by an autonomous AI agent.
The same we… Continue reading AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
Microsoft’s GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign.
The incident impacted 73 Microsoft repositories across four of its GitHub organizations, including Azure, Azure-… Continue reading Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack