TeamPCP (also tracked as UNC6780) deployed a cross-platform JavaScript credential stealer called DUSTMAKER that compromised thousands of developer credentials in under six hours on September 9, 2026, …
Google Threat Intelligence Group released its latest AI Threat Tracker, and VP Sandra Joyce said the threat landscape reduces to three structural shifts: AI is reshaping how software is built, expandi…
Google Threat Intelligence Group (GTIG) reported that in Q2 2026, threat actors compromised a cloud resource and executed an agent-enabled mass credential harvesting campaign in under six hours, highl…
Google LLC's Google Threat Intelligence Group reported that threat actors used a multi-agent AI framework to steal thousands of credentials in under six hours, marking a shift to more autonomous cyber…
Google's Mandiant incident response team reported that extortion crews are stealing companies' proprietary AI data and threatening to leak it unless ransoms are paid, with two cases detailed in Google…
Google Threat Intelligence Group (GTIG) reported that in Q2 2026 threat actors compromised a cloud resource and then planned, built, and executed an agent-enabled mass credential harvesting campaign i…
On 20 May 2026, GitHub confirmed that approximately 3,800 internal repositories were exfiltrated after an employee installed a poisoned code editor extension that handed attackers credentials and clou…