Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic

CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance

ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data

ISACA found 71% of orgs have not run AI incident response exercises as teams face rising pressure

WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets

Cyber defenders need to identify the lowest-risk actions that can be automated before making decisions about adoption

New data from SonicWall shows "relentless" ongoing activity by cyber criminals

Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges.

A purported ad-blocker exfiltrates reams of sensitive information, and benefits from having Google's stamp of approval despite researcher warnings.

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

Anthropic declined an Australian Senate AI hearing as officials investigate an OpenAI agent breach and consider mandatory AI incident reporting.

Authorities in the Netherlands have arrested a 24-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters…