Infostealer malware is hijacking authenticated Claude sessions, allowing attackers to consume paid AI usage without stealing users’ passwords.
Tag: eSecurity Planet
AI-Orchestrated PaperCut Attack Compromises 440 Servers Across 48 Countries
Infostealer malware is hijacking authenticated Claude sessions, allowing attackers to consume paid AI usage without stealing users’ passwords.
32.8 Million Alleged Condé Nast Records Offered for $15,000
A seller is offering 32.8 million alleged Condé Nast user records for $15,000, potentially exposing subscriber details useful for targeted phishing.
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models.
AI and Human Risk Reshape CISO Priorities in 2026
AI and human risk are reshaping CISO priorities as board expectations grow.
Passwd Review 2026: A Top Password Manager for Google Workspace
Passwd is a Google Workspace-focused password manager with strong usability, flexible pricing, passkey support, and private cloud deployment options.
Hackers Route Phishing Through Google to Steal Microsoft Credentials
KnowBe4 found hackers abusing trusted Google services to hide phishing pages that steal Microsoft credentials and enable persistent ScreenConnect remote…
ChatGPT Flaw Let Attackers Secretly Hijack a Victim’s AI Session
Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel.
220 Million Travel Records Exposed Through Default Credentials
Researchers found 220.8 million passenger and crew records exposed through default credentials in a Vietnam-linked database containing sensitive travel…
Google Warns Hackers Are Turning AI Agents Into Attack Tools
Google warns that hackers are using AI agents to automate attack stages, harvest credentials, and accelerate cyberattacks with less human direction.
Microsoft’s September Patch Tuesday Fixes Nearly 1,000 Flaws, Including 2 Exploited Zero-Days
Microsoft’s September 2026 Patch Tuesday fixes nearly 1,000 vulnerabilities, including two Windows zero-days already exploited in attacks.
CVE-2026-75650 Adobe Commerce Zero-Day: Patch Isn’t Enough
Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation.
Google Finds Chinese Hackers Running AI on Compromised Networks
Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring.
G7 Urges Organizations to Start Post-Quantum Migration Now
The G7 says organizations should start post-quantum migration now by inventorying cryptographic dependencies and prioritizing high-risk systems.
AI-Assisted WeChat Worm Put 1 Billion Accounts at Potential Risk
Researchers used AI to build WeWorm, a zero-click WeChat exploit that could hijack accounts through unanswered calls before Tencent mitigated the flaw.
PEEP Turns Chrome, Edge Into Post-Compromise Backdoors
PEEP malware turns compromised Chrome and Edge browsers into persistent backdoors for credential theft, session hijacking, and host command execution.
Samsung’s September Update: Fixes for 90 Security Vulnerabilities on Galaxy Devices
Samsung’s September 2026 security update lists fixes tied to 90 vulnerabilities, including critical Android and Galaxy flaws.
BigBear 2.0 Bypasses Microsoft 365 MFA at 258 Organizations
BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond.
10 of the Best Patch Management Service Providers in 2026
Explore the top patch management solutions for 2026.
AI Agents Helped Breach an Enterprise Network in Under 10 Hours
Unit 42 says AI agents helped a threat actor breach an enterprise network in under 10 hours, compressing weeks of intrusion work into a single day.