Cybersecurity News

In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the cyber industry must worry about.

The agent was looking for public spending data. It found a way into non-public files instead. What do we need to change to stop this from happening?

Spot dangerous sites before you click—and check for scams once you’re there.

Google has released Chrome 154 for desktop and begun rolling out Chrome 155 for Android. Here’s what to check on your device.

Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out

Turning off Location History did not necessarily stop Google from recording where users went. Ireland’s privacy regulator has now fined the company €403 million.

Explore Insikt Group's analysis on Russia's escalation of hybrid and New Generation Warfare (NGW) tactics across Europe since 2022, including cyber attacks, physical sabotage, and airspace incursions, along with projected trends for the next two years.

A scammer asks you to enter a code to open a file or join a meeting. Approving it could sign them in to your account instead.

A convincing offer of a free Claude Max subscription uses a fake browser window to steal Google login information.

The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics.

Recorded Future's Insikt GroupⓇ has been tracking ClickFix, a social engineering technique that turns a familiar logo or verification prompt into the entry point for an attack. Here's what that research reveals about catching it, and why it's now running inside Malicious Site Monitoring, part of our newly launched Digital Risk Protection solution.

Tests found that some cheap smart glasses can be hijacked over Bluetooth, exposing their owners’ photos, videos, and personal data.

A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts.

CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.

Talos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.

Claude helped researchers break into OpenAI in under 72 hours, and exposed how quickly AI is lowering the bar for sophisticated hacking.

Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account

In the age of AI, the new customer of intelligence is an agent. Every agent needs an intelligence layer it can trust to make good decisions and take confident action.

This week on the Lock and Code podcast, we speak with Emanuel Maiberg about Amazon's effort to scan and destroy rare books for AI training.

More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.

Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies.

Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop.

As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it

A list of topics we covered in the week of September 14 to September 20 of 2026

RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.

An unreleased OpenAI model wrote instructions telling itself to ignore developer controls. Here’s what actually happened.

Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images

Parcel delivery phishing messages impersonate familiar couriers and use small fees or promised refunds to steal personal and financial information.

Two reports reveal how Flock’s license plate camera network tracks people’s movements while oversight continues to lag.

In this week's Threat Source, David talks about why focusing on your security basics is still your best bet, even in a world with rapid AI advancements.