Claude Breached Three Organizations During Anthropic Cyber Tests
A misconfigured evaluation harness let three Claude models reach production systems, exposing a control gap that prompts and model safeguards could not contain.
Read article →threats
Threat actors, malware campaigns, phishing, exploitation, and incident activity.
Static Cisco Secure FMC Account Is Under Active Exploitation
Every on-prem Secure FMC configuration is affected. Cisco published hot fixes, a shared license.tmp indicator, and credential-rotation guidance.
Read article →
Compromised Microsoft 365 Mailboxes Spread QR-Code Phishing
Talos tied QR-code PDFs to credential theft, inbox-rule changes, SharePoint staging and new phishing sent from compromised Microsoft 365 mailboxes.
Read article →
Mirage Kitten Used Compromised Windows Hosts as Network Relays
Kaspersky found BridgeHead using Windows SSO to cross corporate proxies before relaying server-selected TCP traffic through compromised hosts.
Read article →
Hermes Logs Record File Enumeration on a Thai Finance Ministry System
Five recovered task logs record service discovery, privilege checks and file enumeration after an operator enabled Hermes's unattended mode.
Read article →
OpenAI Cyber Test Breached Hugging Face Production
Hugging Face traced 17,600 actions from an Artifactory escape through two malicious-dataset vectors and into its clusters, network and source control.
Read article →
Glassworm Poisoned 300+ GitHub Repositories With Stolen Credentials
The botnet spread through developer extensions and packages, then used stolen credentials to force-push malicious code into default branches.
Read article →
Search Ads Used Real ChatGPT Pages to Deliver Malware
Push Security traced paid search ads to shared ChatGPT and Claude pages that handed visitors to fake desktop-app downloads.
Read article →
Google Sued a Phishing Service Behind 2.5 Million Scam Texts
A civil lawsuit targets a Telegram-based phishing-kit operation that Google links to 2.5 million texts and more than one million fraudulent URLs.
Read article →
Edgecution Used a Hidden Edge Extension to Run Commands on Windows
A Teams lure installed a headless Edge extension and a Python native-messaging host, giving a ransomware access broker a quiet route to local command execution.
Read article →
Stolen npm Account Backdoored More Than 140 Mastra Packages
A stolen npm publisher account added a malicious dependency to more than 140 Mastra packages, giving Sapphire Sleet an install-time path into developer and CI systems.
Read article →
Klue Breach Exposed Salesforce Data Through Stolen OAuth Tokens
A forgotten Klue credential led to customer OAuth token theft and direct access to Salesforce CRM data across several companies.
Read article →
Gemini and ChatGPT Recommended Malicious GitHub Skills in Tests
Island found more than 800 fake skills and MCP servers using credible READMEs and ZIP files to turn capability searches into malware installs.
Read article →Showing 92–104 of 108