Workplace AI assistants have mostly waited for a prompt before doing anything. A user asks, the tool answers, and the exchange ends there. Microsoft is putting a different kind of agent inside its Office applications, one designed to keep operating…
Google adds a silent check to catch scammers posing as your contacts
Android is introducing fake call detection to help protect users from impersonation scams. The feature can detect and flag suspected spoofed calls when both parties use Phone by Google on Android 12 or later. It will roll out globally this…
Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws
The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say This article has been indexed from www.infosecurity-magazine.com Read the original article: Infosecurity Europe: Patch Responsibility Remains…
Meta AI Hacked To Hijack Instagram Accounts
Facebook parent says it has resolved issue that allowed attackers to take control of Instagram accounts using its AI support chatbot This article has been indexed from Silicon UK Read the original article: Meta AI Hacked To Hijack Instagram Accounts
Uber Sets AI Coding Usage Caps To Cut Costs
Ride-hailing company sets monthly usage caps for programming staff, after exceeding its annual budget for the tech earlier this year This article has been indexed from Silicon UK Read the original article: Uber Sets AI Coding Usage Caps To Cut…
Musk, SEC Defend Settlement Over Twitter Share Buy
Elon Musk, regulator argue $1.5m settlement is free from collusion or corruption, after federal judge’s challenge This article has been indexed from Silicon UK Read the original article: Musk, SEC Defend Settlement Over Twitter Share Buy
The AI Defense Plane: Securing the New Enterprise Execution Layer
Enterprise security has always had a comforting assumption baked into it: systems do what they were built to do. Sometimes badly. Sometimes insecurely. Sometimes in ways that make auditors develop a nervous twitch. But still, the basic shape was understandable.…
HTTP/2 Bomb — Remote DoS Exploit Hits nginx, Apache, IIS, Envoy, and Cloudflare Pingora
A newly disclosed remote denial-of-service exploit dubbed “HTTP/2 Bomb” targets the default HTTP/2 configurations of the world’s most widely deployed web servers, nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora, enabling a single attacker on a home internet connection…
Anthropic expands Project Glasswing to 150 organizations in more than 15 countries
Anthropic is expanding Project Glasswing, its cybersecurity initiative built around the Claude Mythos Preview model, by adding about 150 organizations following several weeks of work with its initial group of partners, security firms, open-source maintainers, and government agencies. Organizations joining…
Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say
Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar This article has been indexed from www.infosecurity-magazine.com Read the original article: Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say
CISA Warns of Cyberattacks Targeting U.S. Tank Gauge Systems
The Cybersecurity and Infrastructure Security Agency (CISA), alongside the FBI, NSA, Department of Energy, EPA, TSA, Department of Transportation, and USDA, has issued a joint warning about ongoing cyberattacks targeting automatic tank gauge (ATG) systems across the United States. These…
Instagram Accounts Hijacked by Tricking Meta AI Support Into Verifying Attackers as Owners
Several Instagram users had their accounts hijacked after attackers tricked Meta’s AI-powered support tools into believing they were the rightful owners. Thank you for being a Ghacks reader. The post Instagram Accounts Hijacked by Tricking Meta AI Support Into Verifying…
Fake Purchase Orders Spread JS.MonoGlyphRAT in U.S. Enterprise Attacks
Hackers are using highly convincing fake purchase orders and sales documents to sneak a new JavaScript backdoor, JS.MonoGlyphRAT, into US enterprises, where it quietly establishes persistence and enables full remote control of infected systems. The malware arrives as a .js…
Laravel CRLF Injection Flaw Could Disrupt Outbound Email Handling
A high-severity vulnerability in the Laravel framework could allow attackers to manipulate outbound email processing, potentially leading to unauthorized message delivery, data exposure, or the abuse of mail relays. The issue, tracked as CVE-2026-48019, stems from improper neutralization of CRLF…
MazeBolt brings AI-generated attack simulation to DDoS security testing
MazeBolt has announced the launch of RADAR VectorAI, a new MazeBolt module that creates AI-generated DDoS attacks. As AI outpaces human response, enterprises need to have access to validated DDoS vulnerability data about both known and AI-generated attack vectors. Mythos…
Critical Start expands MDR capabilities with multi-agent AI system
Critical Start has released SOC AI, a production-proven multi-agent framework powering its AI-led Managed Detection and Response (MDR). SOC AI coordinates ten specialized agents across the full alert investigation and response lifecycle, covering detection, triage, response, threat hunting, and continuous…
Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web
Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools This article has been indexed from www.infosecurity-magazine.com Read the original article: Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web
Russia claims officials’ surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw
Russia claims officials’ surveillance Project Glasswing access expands CISA flags two-year-old Oracle flaw Get the show notes here: https://cisoseries.com/cybersecurity-news-russia-claims-officials-surveillance-project-glasswing-expands-cisa-flags-two-year-old-oracle-flaw/ Huge thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security…
IT Security News Hourly Summary 2026-06-03 09h : 6 posts
6 posts were published in the last hour 7:2 : FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad 7:2 : Hospital Breach Affects Nearly 33,000 Patients 7:2 : Netskope adds AI asset discovery and AISecOps agent to…
FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad
This investigation is published in three parts. Follow the links below to navigate through our findings: Key Takeaways Introduction The Sekoia.io Threat Detection & Research (TDR) team continuously monitors Gamaredon (aka UAC-0010, Armagedon), an FSB operated Russian intrusion-set historically targeting…
Hospital Breach Affects Nearly 33,000 Patients
Bedfordshire NHS trust warns breach could affect patents who had lab results from 2011 to 2020 at two hospitals it operates This article has been indexed from Silicon UK Read the original article: Hospital Breach Affects Nearly 33,000 Patients
Netskope adds AI asset discovery and AISecOps agent to AI security portfolio
Netskope has announced Netskope One AI Command Center, bringing together AI discovery, risk intelligence, and autonomous response capabilities in a single platform. As the latest expansion of the Netskope One AI Security suite, it helps security teams understand what AI…
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
Cybersecurity researchers have flagged a new campaign targeting Minecraft players via YouTube to spread malware capable of gaining control of victims’ systems. The Minecraft-focused malware-as-a-service (MaaS) campaign has been codenamed Weedhack by McAfee Labs, stating the activity has been active…
50+ Malicious Chrome Extensions Hit 30K Users
50+ malicious Chrome extensions posing as “live wallpaper” utilities have been caught running an adware operation that hijacks browser behavior and quietly pushes remote HTML content to around 30,000 users. These extensions were distributed through at least three publisher accounts…