Google's Mandiant incident response team reported that extortion crews are stealing companies' proprietary AI data and threatening to leak it unless ransoms are paid, with two cases detailed in Google…
Google Threat Intelligence Group (GTIG) reported that in Q2 2026 threat actors compromised a cloud resource and then planned, built, and executed an agent-enabled mass credential harvesting campaign i…
Google Threat Intelligence Group (GTIG) reported that financially motivated threat actor BREEZE COMET (formerly UNC5669) has been targeting Brazilian financial services, retail, and eCommerce organiza…
Security researchers warn that fake AI tools disguised as productivity apps, coding assistants, or browser extensions are a leading malware vector in 2026, with attackers exploiting the fast-moving AI…
On August 7, OpenAI paused internal development of its upcoming model Astra after evaluations showed it may have reached a cybersecurity capability level that no AI model has ever publicly triggered: …
AI deepfakes are enabling a new corporate threat called the 'synthetic insider,' where hackers pose as trusted employees using cheap, realistic fake video and audio. A North Korean scheme used stolen …
Google Cloud COO Francis deSouza announced that AI-powered defenders now have a decisive advantage over attackers by leveraging deep enterprise context, citing the first known AI-built zero-day exploi…
Google's Threat Intelligence Group reported on May 11, 2026, the first documented case of criminals using an AI model to discover a zero-day vulnerability and develop a working exploit, targeting a tw…
Darktrace reported that the threat actor UNC6395 compromised OAuth tokens from the Drift AI chat agent to steal data from over 700 organizations via Salesloft and Salesforce integrations, beginning in…
The Google Threat Intelligence Group (GTIG) has tracked an extortion campaign by the threat actor UNC6671, operating under the "BlackFile" brand, which targets organizations through sophisticated voic…