Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings. [...]
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints. [...]
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
A Microsoft observou um aumento significativo em ataques utilizando o malware ACR Stealer para roubar senhas, tokens de autenticação e documentos confidenciais de clientes empresariais, conforme comunicado publicado na sexta-feira. Entre o final de abril e meados de junho, o ator…
Pesquisadores da Group-IB identificaram um novo malware, denominado HollowGraph, que utiliza o recurso de calendário em caixas de correio do Microsoft 365 comprometidas como canal de comando e controle (C2) para receber instruções e exfiltrar dados roubados. De acordo com relatór…
A Abbott Laboratories confirmou que está investigando dois incidentes cibernéticos distintos – um em sua unidade de diagnóstico de câncer e outro no portal LabCentral –, segundo comunicado publicado em 16 de julho de 2026. O primeiro incidente afeta sistemas herdados da aquisição…
"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign cod…
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data. [...]
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Me…
Abbott Investigating Cyberattack Claims From Two Threat Actors The HIPAA Journal
The healthcare giant Abbott is investigating claims from two threat groups who allege cyberattacks and data theft, one involving legacy […] The post Abbott Investigating Cyberattack Claims From Two Threat Actors appeared first on The HIPAA Journal.
Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts.
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050. Group-IB, which named the malware HollowGraph, sa…
A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware d…
A empresa de inteligência em ameaças Defused confirmou que invasores começaram a explorar ativamente uma vulnerabilidade crítica no ServiceNow AI Platform, registrada como CVE-2026-6875. A falha, descoberta pela Searchlight Cyber e reportada em 1º de abril, permite que atacantes …
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, using the feeds to watch military transport routes, weapons shipments bound for Kyiv, and the locations of Ukrainian troops. That is the finding o…
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system. [...]
A Fairlife, empresa pertencente à Coca-Cola, interrompeu temporariamente sua produção nos Estados Unidos após identificar acesso não autorizado a parte de seus sistemas em um incidente de ransomware. O caso foi divulgado pela Coca-Cola em 16 de julho de 2026. Segundo a companhia,…
FBI agents arrested a Florida man accused of spreading Steam game malware that stole $220,000 in crypto, including $32,000 from a terminally ill cancer patient.
