A financially motivated threat actor used a publicly exposed Ollama model server as the reasoning engine for an automated, multi-stage offensive framework, according to GBHackers reporting based on Sy…
Russian and Chinese actors are using AI to enhance influence operations on X, improving content quality, multilingual reach, and visuals rather than increasing volume, according to a GBHackers analysi…
Researchers published a proof-of-concept AI-driven worm that embeds an open-weight LLM on compromised GPUs to autonomously scan, exploit, and propagate across Linux, Windows, and IoT devices. The worm…
Security researchers at Flatt.tech disclosed a critical supply-chain vulnerability in Anthropic's Claude Code GitHub Actions integration that a single malicious GitHub issue, pull request, or comment …
On June 2, 2026, Sophos researchers detected a modular post-exploitation framework that used AI-assisted development and automated Active Directory discovery, Sophos told BleepingComputer. The toolkit…
A malicious npm package named js-logger-pack, first observed in early April 2026, evolved across 29 versions into a cross-platform malware loader that deploys an 81 MB payload called MicrosoftSystem64…
Security researchers at EclecticIQ identified an SEO poisoning campaign in early March 2026 that used typosquatted domains to impersonate Gemini CLI and Claude Code installation pages. Victims who cop…