An analysis of Project Glasswing findings shows only a fraction of the bugs it has discovered have reached disclosure, and even fewer have been fixed.

US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok.

The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee

Anthropic has found a fourth case of its model accessing third-party systems without authorization

The two companies have shared additional details on agent misbehavior

A blob URL renders and delivers the phishing page inside the target’s own browser, making it harder for security scanners to spot

How infostealer malware fuels the credential theft pipeline — from harvesting and stealer logs to enrichment and dark web marketplace listings.

The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors

Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting together in a single protection suite.

MantaxOtax Android malware combines ransomware with extensive spyware capabilities

CISA has updated its insider threat guide with new advice on remote work, AI and risk detection

The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.