Collaborate Disseminate
The AI Agent Authority Gap – From Ungoverned to Delegation
As discussed in our previous article, AI agents are exposing a structural gap in enterprise security, but the problem is often framed too narrowly.
The issue is not simply that agents are new a… Continue reading Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
Cybersecurity researchers have discovered a set of malicious apps on the Apple App Store that impersonate popular cryptocurrency wallets in an attempt to steal recovery phrases and private keys since at least fall 2025.
“Once launched, these apps redir… Continue reading 26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases
Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and ultimately facilitate the abuse of Microsoft Visual Studio Code (VS Code) tunne… Continue reading Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2
A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild less than 13 hours after its public disclosure.
The vulnerability, tracked as CVE-2026-33626 … Continue reading LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts.
“As with many other intrusions in recent years, UNC669… Continue reading UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
Bitwarden CLI has been compromised as part of the newly discovered and ongoing Checkmarx supply chain campaign, according to new findings from Socket.
“The affected package version appears to be @bitwarden/cli@2026.4.0, and the malicious code was publi… Continue reading Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. Same mistakes.
The supply chain is messy. Packages you did not check are stealing data, adding… Continue reading ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
Imagine a world where hackers don’t sleep, don’t take breaks, and find weak spots in your systems instantly.
Well, that world is already here.
Thanks to AI, attackers are now launching automated, large-scale exploits faster than ever before. The time y… Continue reading [Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed
Last week, Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that they took the extraordinary step of postponing its public release. Instead, the company has given access to Apple, Microsoft, Google… Continue reading Project Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?
Mongolian governmental institutions have emerged as the target of a previously undocumented China-aligned advanced persistent threat (APT) group tracked as GopherWhisper.
“The group wields a wide array of tools mostly written in Go, using injectors and… Continue reading China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors