4+ day, 9+ hour ago   (532+ words) KnowBe4 found hackers abusing trusted Google services to hide phishing pages that steal Microsoft credentials and enable persistent ScreenConnect remote access. A familiar Google address in a suspicious email may be exactly what attackers want you to trust. KnowBe4 Threat Lab uncovered…...

4+ day, 10+ hour ago   (611+ words) Google warns that hackers are using AI agents to automate attack stages, harvest credentials, and accelerate cyberattacks with less human direction. Attackers are beginning to use AI agents to complete in hours some malicious tasks that previously required far more…...

4+ day, 9+ hour ago   (745+ words) Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel. The more access you give ChatGPT, the more an attacker can work with if they trick the AI…...

4+ day, 21+ hour ago   (610+ words) Researchers used AI to build WeWorm, a zero-click WeChat exploit that could hijack accounts through unanswered calls before Tencent mitigated the flaw. Security company Calif said it created a proof-of-concept worm that could hijack WeChat accounts on iPhones and Android…...

4+ day, 17+ hour ago   (452+ words) Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring. Suspected China-linked hackers are running AI models inside cloud environments they have already breached. Google Threat Intelligence Group suspects UNC6508, a China-linked…...

6+ day, 15+ hour ago   (650+ words) OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment. OpenAI agents turned an obscure German-language programming wiki into an unauthorized message board and continued posting after its administrator…...

6+ day, 20+ hour ago   (568+ words) Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations. Cloudflare has announced Vulnerability Discovery and Remediation, a new service designed to automate vulnerability discovery, generate code fixes, and deploy edge…...

1+ week, 2+ day ago   (382+ words) CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. AI gateways are becoming high-value attack surfaces. CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on…...

1+ week, 2+ day ago   (861+ words) Security teams are building custom AI agents to improve defense, close tooling gaps, and automate workflows, but strong governance remains critical. For security professionals, they’re inescapable: nearly every vendor is trying to sell a product that uses them, to the…...

1+ week, 2+ day ago   (772+ words) Most enterprises would say they have a cyber resilience strategy. They back up data with platforms like Veeam, Rubrik, or Cohesity. Identity is managed through Okta or Microsoft Entra ID. Cloud infrastructure lives across AWS, Azure, and Google Cloud. Network and…...