Gen Digital traced a GRAYRABBIT intrusion to a crafted Sogou Input Method link. The link opened a six-year-old browser engine with its sandbox disabled, allowing an old JavaScript exploit to run.
Anthropic says a Russia-linked espionage operator used AI to monitor detections and keep rebuilding malware until it was no longer detected. The attack cycle, not a single hash, is now the defensive problem.
Phishing victims installed a legitimate Faronics Deploy agent that enrolled their computers into attacker-controlled management consoles.
Operation Fake KickOff uses fake recruiters, browser-in-the-browser pages and live MFA relay to steal corporate Google Workspace access.
Rapid7 counted twice as many high and critical disclosures, while newly exploited vulnerabilities stayed near 40. The queue is not the risk model.
Cisco Talos found UAT-10147 using agentic AI to scale exploitation and post-compromise work across a target list containing approximately 170,000 web-server URLs.
Alleged Entra directory theft exposed organisational maps rather than passwords. Treat bulk directory reads as a high-impact identity event.
Sable Squirrel buys expired domains with inherited reputation, traffic and dependencies. Domain retirement must remove trust before ownership changes.
JWR combines 44 phishing pages with an encrypted WebSocket and live operator commands, turning a fake page into an adaptive fraud session.
For much of the post-war era, Germany deliberately kept its intelligence services on a comparatively short leash. That was not accidental. The country’s history made extensive state surveillance politically and legally sensitive, and German intelligence agencies developed under far tighter…
