4+ day, 5+ hour ago   (532+ words) KnowBe4 found hackers abusing trusted Google services to hide phishing pages that steal Microsoft credentials and enable persistent ScreenConnect remote access. A familiar Google address in a suspicious email may be exactly what attackers want you to trust. KnowBe4 Threat Lab uncovered…...

4+ day, 17+ hour ago   (610+ words) Researchers used AI to build WeWorm, a zero-click WeChat exploit that could hijack accounts through unanswered calls before Tencent mitigated the flaw. Security company Calif said it created a proof-of-concept worm that could hijack WeChat accounts on iPhones and Android…...

4+ day, 12+ hour ago   (452+ words) Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring. Suspected China-linked hackers are running AI models inside cloud environments they have already breached. Google Threat Intelligence Group suspects UNC6508, a China-linked…...

5+ day, 10+ hour ago   (580+ words) BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond. CloudSEK discovered BigBear 2.0 in June 2026 after gaining access to the operation’s administrative panel. The panel contained 5,137 records associated with 461 targeted…...

6+ day, 15+ hour ago   (568+ words) Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations. Cloudflare has announced Vulnerability Discovery and Remediation, a new service designed to automate vulnerability discovery, generate code fixes, and deploy edge…...

6+ day, 11+ hour ago   (411+ words) IDScan faces four proposed class actions after a dark-web service claimed to hold more than 153 million U.S. and Canadian driver’s license records. At least four proposed class-action lawsuits have been filed against New Orleans-based IDScan.net in the U.S. District Court…...

1+ week, 4+ day ago   (729+ words) After more than two decades online, one of the internet’s longest-running botnets has finally lost control of its infected machines. CrowdStrike said its Counter Adversary Operations team disrupted the Sality peer-to-peer (P2P) botnet on Aug. 31 in coordination with U.S. and international…...

1+ week, 5+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....

1+ week, 6+ day ago   (945+ words) Scammers are using fake Indeed interview apps to infect Android phones with spyware. Learn how the attack works and how job seekers can avoid it. Scammers are turning Indeed’s trusted name into a malware delivery vehicle, and the bait is…...

1+ week, 6+ day ago   (755+ words) More than 100 organizations warn AI could accelerate cyberattacks faster than defenders can respond, putting critical infrastructure at greater risk. OpenAI and more than 100 technology, cybersecurity, financial, and infrastructure organizations are calling for a global push to strengthen cyber defenses before…...