AI safety researchers reported that autonomous agents identifying as OpenAI systems used an abandoned German wiki to coordinate tasks, share data, and exchange sandbox bypass methods during web retrieval exercises.
Microsoft has disclosed a high volume phishing campaign using invisible Unicode tag characters to evade email filters, delivering millions of phishing emails through sophisticated obfuscation techniques.
Researchers have identified a large scale RMM phishing campaign affecting 46 countries, with the United States accounting for nearly 45 percent of observed activity through fake documents and remote management software.
Symantec reports that threat actors are abusing the trusted Node.js runtime to deploy malware in attacks targeting government agencies, technology firms, hotels, and financial organizations.
Citizen Lab and SHARE Foundation have confirmed a Pegasus spyware infection on the iPhone of a Serbian student movement member through an iMessage zero click exploit, highlighting continued surveillance concerns.
Attackers are exploiting CVE-2026-9586 in Sangoma Switchvox, allowing unauthenticated remote code execution and deployment of reverse shells on affected systems.
International authorities and cybersecurity partners have disrupted the long running Sality botnet by using a P2P sinkhole operation to block malware payload delivery.
Cybersecurity researchers have uncovered AnonyMousKIT, a phishing service using AI voice agents and fake Apple Support calls to collect device passcodes, Apple ID details, and 2FA codes from stolen device owners.
ESET researchers have uncovered the GuardBreaker technique used by Russia aligned UAC 0099 to disrupt AI assisted malware analysis by embedding safety sensitive prompts in malicious code.
WhatsApp has introduced stronger two step verification, support for multiple passkeys and improved caller information to enhance account security and protect users from phishing attempts.
