Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.

Meta's AI support agent bound recovery emails to accounts for whoever asked, and SOCs never saw an alert. An authorized agent writes a log of legitimate transactions, so nothing in the detection [...]

Dutch intelligence services warn of Russian hackers targeting Signal and WhatsApp

The Netherlands’ military intelligence service and domestic intelligence agency have issued a join warning claiming that Russian hackers have launched "a large-scale global cyber campaign to ga [...]

Pro-Russian hacker group claims responsibility for DDoS attack on French postal service

A pro-Russian hacker group has come forward as the perpetrator of a DDoS attack on the French national postal service La Poste that took place on December 22, according to Reuters. The distributed den [...]

Russia's recent blocking of Telegram is reportedly disrupting its military operations in Ukraine

A decision to ban Telegram on home soil may have backfired on the Kremlin. Last week, Russia went on a blocking spree, banning a number of Western apps in an effort to push domestic users towards Max, [...]

What’s going on with Donut Lab?

In January, a Finnish-Estonian startup proclaimed it had developed a truly solid state battery, a holy grail for the technology industry. Donut Labs’ cell wasn’t just solid state, however. It clai [...]

Russian regulators are trying to seize assets from the developers of World of Tanks

Top executives from Wargaming and Lesta Games, the joint developers of World of Tanks, could have their stakes in their respective companies seized by the Russian government, according to reports from [...]

Anthropic's AI was used by Chinese hackers to run a Cyberattack

A few months ago, Anthropic published a report detailing how its Claude AI model had been weaponized in a "vibe hacking" extortion scheme. The company has continued to monitor how the agenti [...]

How recruitment fraud turned cloud IAM into a $2 billion attack surface

A developer gets a LinkedIn message from a recruiter. The role looks legitimate. The coding assessment requires installing a package. That package exfiltrates all cloud credentials from the developerâ [...]

Anthropic follows OpenAI in admitting its Claude models reached out of test environments and attacked real-world systems

Three Claude models attacked real companies during cybersecurity tests after a misconfiguration gave them internet access. One published malware on PyPI that infected 15 systems. Another kept attackin [...]