CyberNews

A network of seven China-based AI labs has been caught running large-scale attacks using a sophisticated technique called Claude Distillation, according to recent findings. The affected organizations are all prominent players in the artificial intelligence (AI) and machine learning (ML) communities, with some having already publicly disclosed that they’ve been impacted. At its core, Claude … Read more

A Critical File-Read Flaw in GitLab Exposes Users to High-Risk Attacks GitLab, a popular software development platform, has disclosed a critical vulnerability in its system that allows attackers to read sensitive files. The flaw, rated CVSS 10 – the highest severity rating on the Common Vulnerability Scoring System – has already been exploited in-the-wild, putting … Read more

A newly uncovered AI-powered attack on Papercut print management software has sent shockwaves through the cybersecurity community, highlighting the rapid evolution of cyberattack strategies. In a matter of hours, an AI swarm compromised over 440 instances of Papercut NG and MF hosted by 395 organizations in 48 countries, demonstrating the potential for unprecedented speed and … Read more

Threat Actors Hijack Trusted AI Platforms to Deliver Malware Cybersecurity researchers at Huntress have uncovered a disturbing trend in which malicious actors are exploiting trusted AI platforms to deliver malware to unsuspecting users. Over the past nine months, these attackers have successfully weaponized shareable AI content, public mini-apps, and sponsored search placement to target AI … Read more

A recent spate of high-profile breaches has highlighted a worrying trend in cybersecurity. Despite robust perimeter defenses, many organizations are finding themselves vulnerable not just from external threats, but also from within – due to identity exposure and compromised user credentials. A closer examination of these incidents reveals that the root cause often lies not … Read more

Russian State-Sponsored Hackers Rebuild Malware with Ease, Thanks to ‘Claude’ Tool A devastating new tactic has emerged in the world of cyber warfare, courtesy of Russian state-sponsored hackers. These malicious actors are using a sophisticated tool called “Claude” to rebuild malware that’s been detected by security systems, allowing them to evade even the most advanced … Read more

A sophisticated threat actor has been using a tool called Claude to automate exploitation and data theft across multiple victims, compromising their sensitive information. The news highlights the growing concern of identity exposure being used as a stepping stone for active attack paths. Claude is a highly advanced tool that leverages cross-domain privilege escalation to … Read more

Phishing Attacks Get Sneakier: How Invisible Unicode Characters are Evading Detection In a disturbing trend, attackers have been using invisible Unicode tag characters to evade phishing detection. This technique, known as AI prompt injection or ASCII Smuggling, is allowing cybercriminals to inject malicious code into seemingly legitimate emails and messages. The result is a sophisticated … Read more

Trezor customers targeted in massive phishing campaign after email provider Brevo is breached, exposing nearly 350,000 email addresses. A major cybersecurity incident has unfolded for Trezor users this week, with threat actors taking advantage of a breach in the company’s third-party email provider, Brevo. The attack, which was swiftly contained by Trezor, saw phishing emails … Read more

GitLab’s Urgent Warning: Patch Now Against Maximum-Security Flaw GitLab has issued an urgent warning to its users, advising them to patch their servers immediately against a maximum-severity path traversal vulnerability. The security flaw, dubbed CVE-2026-85706, allows unauthenticated attackers to read arbitrary data from vulnerable servers, including sensitive information like credentials and secrets. The bug was … Read more