-
Iran-linked APT42 is escalating its espionage operations with AI-assisted phishing and an expanded TAMECAT backdoor, enabling long-lived access to defense and government identities rather than just endpoints. Recent activity shows tightly integrated so…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AgentBaiting is the clearest sign yet that AI agents and their capability ecosystems have become a first‑class malware delivery surface, with FakeGit’s 7,600‑repo operation pushing SmartLoader and StealC directly into AI Skills and MCP workflows. By tu…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Bit2Watt is a newly disclosed cyber‑physical attack class that weaponizes AI and GPU workloads in modern data centers to destabilize nearby power grids, turning compute infrastructure itself into a grid‑scale threat surface. Measurements on NVIDIA acce…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NadMesh is a new, industrial‑grade Go‑based botnet that weaponizes more than 20 RCE vectors to hijack AI and MCP infrastructure at scale, combining autonomous scanning, exploit delivery, and credential harvesting in a single closed‑loop platform. In ea…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly proposed framework argues that AI penetration testing must move beyond conventional infrastructure compromise and assess whether an adversary can make an AI-enabled system act against its intended operational purpose. Traditional penetration te…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has introduced GPT-Red, an automated safety red-teaming model trained to identify and exploit prompt injection weaknesses in AI agents. Prompt injection occurs when malicious instructions hidden in webpages, emails, local files, code repositorie…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AI agents are increasingly crossing the line from generating content to executing actions inside developer workstations, cloud environments, and enterprise systems. New telemetry from Gen’s H1 2026 Threat Report shows that agent runtime controls detect…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A one-click Claude Desktop flaw allowed attackers to submit concealed instructions without review, exposing chats and enabling code execution on some systems remotely.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
