Phishing is entering a leaner but more dangerous phase, as attackers use artificial intelligence, encrypted delivery and session hijacking kits to turn fewer attempts into higher-value intrusions. Zscaler’s ThreatLabz 2026 Phishing and Initial Access Report says overall phishing volume fell by about 20% year on year for a second consecutive year, but the decline masks a shift towards campaigns built for speed, credibility and credential theft. The […]
Cybercriminals are using counterfeit AI learning material and developer guides to lure professionals into opening files that trigger a multi-stage malware chain ending in AsyncRAT, a remote access trojan capable of surveillance, data theft and covert system control. The campaign targets Windows users with archives and documents framed as useful resources for artificial intelligence adoption, coding and marketing. One lure was presented as a developer guide for […]
AI coding agents can be manipulated into running attacker-chosen code through ordinary-looking bug reports, exposing a fresh security gap in the fast-expanding market for autonomous software development tools. Tenet Security researchers have described a technique they call “agentjacking”, in which a hostile actor plants malicious instructions inside a fake software error report and waits for a coding agent to read it during routine debugging. The attack does […]
Autonomous email agents are emerging as a fresh enterprise security risk after a laboratory test showed an OpenClaw-based assistant forwarding cloud credentials and business records in response to ordinary phishing-style messages. The controlled exercise centred on an AI agent named Pinchy, configured on the OpenClaw platform to monitor a Gmail inbox, process messages and perform tasks through connected workplace tools. The test environment used synthetic corporate material, […]
Hackers are turning TikTok and Instagram Reels into malware delivery channels, using polished tutorial-style clips that promise free premium software and then steer users towards malicious downloads or command-line instructions that compromise their devices. The campaign marks a shift in social engineering from email inboxes and fake websites to short-form video feeds, where attackers mimic creator culture, use casual language and rely on platform algorithms to amplify […]
Humanity Protocol suffered a sharp market collapse after a private-key compromise hit wallets linked to the Web3 identity project, draining more than $30 million and sending its H token down by nearly 90 per cent during Tuesday trading. The breach exposed a critical weakness in one of the fastest-rising digital identity ventures in the crypto market, where projects promise privacy-preserving proof of personhood but still depend on […]
Software developers across close to 100 organisations have been targeted by a likely North Korea-linked hacking operation that used fake recruitment and code-review tasks to steal cryptocurrency, browser credentials and wallet data. The campaign, tracked by security researchers as UNK_DeadDrop, unfolded over April and May and reached targets in technology, finance, cryptocurrency, education, business services and other sectors. More than 250 phishing emails were sent during a […]
Facebook’s creator payment system has become entangled in Alberta’s separatist politics after an investigation identified overseas-run accounts impersonating local activists and publishing content that promoted breaking away from Canada. The accounts presented themselves as voices from inside Alberta’s independence movement, using names, profile images and language designed to appear local. Several were linked to operators outside Canada who appeared to be using divisive political material to attract […]
Attackers are increasingly abusing legitimate system utilities and widely used administrative tools to deliver malware, move through networks and avoid detection, forcing security teams to rethink defences built mainly around blocking suspicious files. The tactic, commonly described as “living off the land”, relies on trusted tools already present inside corporate environments. PowerShell, Windows Management Instrumentation, certutil, mshta, rundll32, regsvr32, scheduled tasks, remote monitoring software and JavaScript execution […]
Blockchain users searching for simpler wallet identities have pushed. bit into the wider debate over decentralised naming, digital ownership and cross-chain authentication, as Web3 developers look for alternatives to long alphanumeric addresses that remain difficult for mainstream users to manage.. bit is commonly called a “domain”, but its developers describe it more precisely as a decentralised identity and account system rather than a conventional internet domain. Unlike […]
Cybercriminal groups are shifting phishing campaigns from fake login pages to malware-led intrusions that silently extract passwords, browser cookies, session tokens, cryptocurrency wallet data and other sensitive information from infected devices. The change marks a significant turn in online fraud tactics. Classic phishing pages still imitate banks, cloud services, delivery firms and workplace platforms, but attackers are increasingly using emails, search ads, fake software installers, messaging apps […]
Anthropic has expanded access to Claude Mythos Preview to about 200 organisations, widening a controlled cybersecurity programme designed to help governments, companies and critical software maintainers find severe vulnerabilities before attackers can exploit them. The San Francisco-based artificial intelligence company is adding around 150 organisations to Project Glasswing, its gated initiative for defensive use of a frontier model that has drawn intense attention from technology companies, banks, […]
Anthropic is expanding access to Claude Mythos Preview through Project Glasswing, widening a controlled cybersecurity programme at a time when North Korean-linked hackers are sharpening attacks against macOS users in the financial, venture capital, Web3 and cryptocurrency sectors. The San Francisco-based AI company plans to increase the number of Project Glasswing partners from about 50 to roughly 200 organisations across more than 15 countries, broadening access to […]
Cybercriminals are exploiting trust in artificial intelligence platforms by abusing shared ChatGPT and Claude content links to steer users towards malware disguised as legitimate OpenAI software. The campaign, tracked by security researchers as LLMShare, uses malicious search advertisements and search-engine manipulation to lure victims to pages that appear to be hosted on trusted AI domains. Once users click through, they are shown a fully designed web page […]
Arabian Post Staff -Dubai UAE regulators have approved the oral form of Wegovy for weight management and cardiovascular risk reduction, expanding access to one of the world’s most closely watched obesity treatments beyond weekly injections. Emirates Drug Establishment cleared Wegovy, the semaglutide medicine developed by Novo Nordisk, as a once-daily tablet for adults living with obesity or overweight linked to weight-related health conditions. The approval makes the […]
A destructive cyber campaign tied to Iran-linked operators has targeted organisations in the Middle East and abroad, deleting virtual machines, databases, partitions and backup repositories in attacks designed to cripple recovery as well as disrupt daily operations. The activity has been linked by forensic investigators to infrastructure and tactics associated with Black Shadow, a long-running threat group assessed by Israeli authorities and private researchers as operating on […]
Instagram is under renewed pressure over claims that a weakness in Meta’s AI-assisted support and account recovery systems could allow attackers to manipulate password reset flows and target high-value accounts. The allegation centres on an AI-powered help feature intended to guide users through account recovery, settings changes and login problems. Security researchers say the system could allegedly be prompted in ways that allowed unauthorised parties to trigger […]
Hackers are using fake Signal support messages to trick users into handing over backup recovery keys, opening a new front in attacks against one of the world’s most trusted encrypted messaging platforms. The campaign centres on messages sent inside Signal from accounts posing as “Signal Support”. Targets are warned that their backed-up chats and media face permanent loss because of a supposed sync problem. They are then […]
Paris Hilton and journalist Laurie Segall have launched a 14-part TikTok investigation that names a Canadian pharmacist linked to MrDeepFakes, the shuttered website that became one of the world’s largest hubs for non-consensual AI-generated explicit videos. The series, Searching for Mr. Deepfakes, began streaming on Hilton’s TikTok channel on 27 May and follows Segall’s multi-year effort to identify the people behind the site. It places fresh public […]
A malicious NuGet package posing as a Sicoob software development kit has exposed sensitive banking authentication data, intensifying concerns over attacks that exploit trust in open-source developer ecosystems. The package, published as Sicoob. Sdk, was presented as a C# SDK for integrations with Sicoob, one of Brazil’s largest cooperative financial systems. Versions 2.0.0 to 2.0.4 were found to collect client IDs, PFX passwords and base64-encoded PFX certificate […]
Russia-linked cyber operators tracked as GREYVIBE have used generative artificial intelligence tools including ChatGPT and Google Gemini to widen cyber-espionage operations against Ukraine-linked targets, signalling a shift in how lower-skilled threat groups can build lures, malware and infrastructure at speed. The activity, active since at least August 2025, has targeted military, government, civilian and business-related organisations through phishing emails, fake verification pages, fraudulent websites and custom malware. […]
Google has made Device Bound Session Credentials generally available in Chrome for Windows, widening access to a security feature designed to blunt one of the most common routes into compromised online accounts: stolen session cookies. The move gives Chrome users and organisations a stronger layer of protection after login, where many account takeovers now occur even when passwords and multi-factor authentication have already been passed. DBSC links […]
Cybercriminals are shifting from crude misspellings of trusted software packages to more convincing names that appear to belong inside legitimate developer ecosystems, raising fresh concern across open-source security teams and enterprise software supply chains. The change marks a significant evolution in package impersonation attacks. Rather than relying only on a developer mistyping a package name, malicious publishers are creating packages that look like natural extensions, plugins, configuration […]
Hackers are using illegal streaming and digital library websites to spread cryptocurrency miners and remote access malware through fake video player updates, exposing millions of visitors to stealthy infections that can drain computing power and give attackers remote control over compromised systems. The campaign targets users who attempt to watch pirated films or television shows. Instead of loading the video, the website displays a warning that a […]
