The Wave

1. 2h agoBleepingComputerFBI warns ARTEX AI hacking tool is powering global cyberattacksThe FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles

   1. YesterdayThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 2h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 5h agoWiz Research · research by NordStellarLiteLLM Compromised, Steals Credentials | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 5h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 5h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
3. 5h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
4. 5h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
5. 5h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz BlogWiz outlines its AI agent intent-detection pipeline, which uses model I/O telemetry, layered LLM analysis, and runtime correlation, validated against a simulated benchmark and referencing the OpenAI–Hugging Face incident.

   2 articles

   1. 5h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz Blog
   2. 5h agoWiz ResearchEarliestBuilding an AI Detection Engine for Agent Intent | Wiz Blog

   Cyber22 linked
6. 5h agoWiz ResearchHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogWiz Research published a blog post explaining its principles for benchmarking AI agent cybersecurity capabilities, drawing on its Cyber Model Arena v3.9 results across 59 agents and 327 challenges.1 outletCyber4 linked
7. 4d agoWiz Research · research by WizSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
8. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
9. YesterdayCSO Online · research by AikidoThousands of GitHub repos hit with secret-stealing malwareThreat actor behind the 'wfx-loot' campaign used about 4,800 compromised GitHub accounts to inject credential-stealing workflows into tens of thousands of repositories and stole CI and cloud secrets from at least 1,835 targets.

   2 articles · BleepingComputer

   1. 2d agoBleepingComputerEarliestHackers compromise 4,800 GitHub accounts to steal cloud credentials
   2. YesterdayCSO OnlinePickupThousands of GitHub repos hit with secret-stealing malware

   Cyber12 linked
10. 3d agoSecurityWeek · research by HuntressHackers Deploy Malware in Fresh ScreenConnect CampaignHuntress reports an intruder abused a third-party RMM+ extension in cloud-hosted ScreenConnect partner panels to push attacker-controlled ScreenConnect clients to at least 288 computers across 48 organizations, prompting ConnectWise to disable five extensions.

    4 articles · The Register

    1. 3d agoSecurityWeekPickupHackers Deploy Malware in Fresh ScreenConnect Campaign
    2. 3d agoThe RegisterPickupHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
    3. 3d agoCybersecurity DivePickupConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
    4. 3d agoCyberScoopEarliestRogue remote-access campaign spread through ScreenConnect add-on, researchers say

    Cyber32 linked
11. YesterdayAnthropicWhen AI builds itselfAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

    12 articles

    1. YesterdayAnthropicPolicy on the AI Exponential
    2. YesterdayAnthropicNatural Language Autoencoders
    3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
    4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
    5. YesterdayAnthropicTrustworthy agents in practice
    6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
    7. YesterdayAnthropicUnderstanding and addressing AI harms
    8. YesterdayAnthropicTeaching Claude why
    9. YesterdayAnthropicPetri: An open-source AI auditing tool
    10. YesterdayAnthropicLLMs and biorisk
    11. YesterdayAnthropicAnthropic’s Transparency Hub
    12. YesterdayAnthropicEarliestWhen AI builds itself

    AI236 linked
12. 2d agoWIREDMicrosoft 365 Crawls Back to Life After a 24-Hour OutageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

    4 articles · 2 outlets

    1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
    2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
    3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
    4. YesterdayYahooPickupMicrosoft says services fully restored after day-long global outage

    Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
13. YesterdayAnthropicU.S. elections readinessAnthropic activated its AI Safety Level 3 deployment and security protections for Claude Opus 4 as a precautionary measure under its Responsible Scaling Policy.

    7 articles

    1. YesterdayAnthropicEarliestActivating AI Safety Level 3 protections
    2. YesterdayAnthropicPickupU.S. elections readiness
    3. YesterdayAnthropicChallenges in red teaming AI systems
    4. YesterdayAnthropicAnthropic update on independent evaluators
    5. YesterdayAnthropicPickupAnthropic is endorsing SB 53
    6. YesterdayAnthropicClaude does cyber competitions
    7. YesterdayAnthropicMeasurements for understanding the pace of AI development inside frontier labs

    AI176 linked
14. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
15. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

    6 articles · Daily Mail

    1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
    2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
    3. 4d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
    4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
    5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
    6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

    Cyber122 linked
16. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
17. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
18. YesterdayEuronewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?A week-long Microsoft Outlook and Teams outage across 74 countries has revived European concern over reliance on a few US cloud providers, alongside a draft MEP report urging public buyers to favor European cloud services.1 outletAIMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns20 linked
19. 3d agoThe Record · research by CloudSEKKazakhstan-linked hackers used AI agent to spy on Central Asian governmentsCloudSEK analysed an exposed open directory from a Silent Lynx operator server, revealing its tooling, active intrusions into Central Asian government and infrastructure targets, a DeepSeek-driven AI agent, and preparations for a Turkmenistan-focused campaign.

    4 articles · 2 outlets

    1. 4d agoCloudSEKOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    2. 4d agoCloudSEKOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    3. 4d agoCloudSEKEarliestOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    4. 3d agoThe RecordPickupKazakhstan-linked hackers used AI agent to spy on Central Asian governments

    CyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
20. 2d agoAnthropicClaude's new constitutionAnthropic published a new constitution for its Claude models, releasing the full text under CC0 so anyone can use it freely.

    3 articles · 2 outlets

    1. 5d agoSecurityWeekPickupAnthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
    2. 2d agoAnthropicEarliestClaude's new constitution
    3. 2d agoAnthropicDetecting and countering malicious uses of Claude

    91 linked
21. 2d agoAtlantic CouncilBeyond the spy scandal: What the Nvidia-Megaspeed case reveals about export controlsAtlantic Council analysis argues the Nvidia–Megaspeed case exposes weak export-control enforcement and urges Congress and agencies to act on chip location verification, remote access rules, oversight, and counterintelligence.1 outletAICongress presses Nvidia and Commerce over Megaspeed chips and China ties42 linked
22. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
23. 2d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
24. 2d agoElasticWindows Endpoint Security Platform: Inside wesp.sysElastic's analysis of Microsoft's undocumented Windows Endpoint Security Platform finds that its kernel driver wesp.sys is a file system mini-filter that talks to user mode over a filter communication port, with no one-way reply path yet.1 outletCyber3 linked
25. 3d agoThe RecordConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsConnectWise is probing ScreenConnect breaches at nearly 50 organizations, tying the activity to the abuse of a third-party RMM+ extension and disabling it across roughly 400 customer environments.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers9 linked
26. 4d agoBleepingComputerRailway breach leads to $740,000 in fraudulent AI chargesRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · Computerworld

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
27. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
28. 4d agoBleepingComputer · research by Arctic WolfHackers use AntiFox AI agents in AWS credential-theft attacksArctic Wolf reports that attackers hosted AntiFox, an AI-driven pentesting tool forked from ARTEX, on Alibaba Cloud to run webshell deployment and AWS credential-abuse intrusions.1 outletCyber1 linked
29. 4d agoComputerworldThe bad news for Microsoft in the Blue TsunamiComputerworld columnist argues that Democratic midterm wins will bring investigations, data center crackdowns, AI regulation and ICE budget cuts that threaten Microsoft's business.1 outletAI3 linked
30. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

    19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

    1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
    2. 2d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
    3. 2d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    4. 2d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
    6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
    7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
    8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
    11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
    12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
    13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
    14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
    15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
    16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
    17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
    18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
    19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

    Cyber448 linked
31. 5d agoWiz ResearchThe SolarWinds Attack | Wiz BlogWiz publishes a running cloud-focused guidance blog on the SolarWinds supply-chain attack, detailing hybrid on-prem-to-cloud attack vectors and detection steps for cloud security teams.1 outletCyber14 linked
32. 4d agoWiz ResearchBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
33. 6d agoYahooFrench officials blame Iran for refrigerator hacks, vow retaliationReuters reports French officials suspect Iran-backed hackers behind the October refrigerator hacks in France, one of the most disruptive cyberattacks of the ongoing US-Iran war.

    2 articles

    1. 6d agoYahooEarliestFrench officials blame Iran for refrigerator hacks, vow retaliation
    2. 6d agoSouth China Morning PostFrench officials suspect Iran is behind fridge cyberattacks, sources say

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks4 linked
34. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
35. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
36. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
37. 5d agoWiz ResearchNew attack vectors emerge via recent EKS updates | Wiz BlogWiz Research details how attackers could abuse new AWS EKS Access Entries, Access Policies and Pod Identity features to enumerate clusters, escalate privileges and steal cloud credentials.1 outletCyber3 linked
38. 4d agoYahooU.S. Moves To Disrupt Iran’s MANPADS Procurement—History Shows It’ll Have Its Work Cut OutThe State Department sanctioned two individuals and one entity from Belarus, Nigeria and Russia over helping Iran procure MANPADS, days before CENTCOM launched Task Force Iron Gate to interdict sanctioned arms flows.1 outletDefense13 linked
39. 5d agoDark ReadingArtex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading reports that forks of the open-source Artex AI pen-testing framework, plus 45 similar tools, can still be used to run credential attacks and cloud breaches at machine speed.1 outletCyber9 linked
40. 5d agoWiz ResearchMidnight Blizzard breach: analysis and best practices | Wiz BlogWiz Research breaks down how Midnight Blizzard used a compromised legacy test OAuth application to gain mailbox access in Microsoft's corporate tenant and lists detections and hardening steps against similar attacks.1 outletCyber6 linked
41. 5d agoWiz ResearchBridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments | Wiz BlogWiz Research publishes a fourth blog post detailing on-prem-to-cloud lateral movement techniques (cached cleartext cloud keys, PRT pass-the-PRT and pass-the-cookie attacks) and recommended mitigations across AWS, Azure and GCP.1 outletCyber1 linked
42. 5d agoWiz ResearchHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogWiz Research published a cloud incident response guide that lists AWS, Azure and GCP APIs attackers could use to maintain persistence after the CircleCI breach and supplies hunting queries for each provider.1 outletCyber4 linked
43. 4d agoWiz Research · research by WizOperation Stormbreaker case study | WizWiz published a vendor case study describing how the Marine Corps Community Services (MCCS) used Wiz in its Operation StormBreaker initiative to cut Authorization to Operate timelines from about 18 months to 30 days.1 outletCyber7 linked
44. 4d agoUSA Today · research by Cisco TalosFood delivery habits are giving cybercriminals personal infoCisco Talos reported that the VOLTA-AUTODOXER Windows infostealer uses a large language model to build detailed victim profiles from stolen credentials and email receipts.1 outletCyber2 linked
45. 5d agoDark ReadingAI Coding Agents Leak Thousands of Secrets to GitHubDark Reading reports that a Claude Code command can inadvertently commit credentials and other sensitive files to public GitHub repositories, exposing organizations to security gaps.1 outletCyber7 linked
46. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
47. 5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
48. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
49. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
50. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
51. 9d agoThe Record · research by DigiCertCertificate authority DigiCert reports data breach involving business customer infoDigiCert disclosed a data breach in which an exposed internal business system, moved outside its VPN-restricted network, was accessed by an outside party and leaked customer names, contact details and identity documents.1 outletCyber1 linked
52. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
53. 9d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
54. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
55. 10d agoAxiosTech giants turn to cash, concessions for AI rebrand after voters pummeled data centers 43-1Tech companies including OpenAI, Amazon, Google and Microsoft are offering community payments and concessions to win back public support for data centers after voters backed restrictions in 43 of 44 ballot measures.1 outletAIVoters back data center limits in 2026 elections; Hawley seeks national moratorium21 linked
56. 11d agoCybersecurity DiveAttacker abuses Microsoft Entra ID to target downstream MSP clientsA lone hacker is abusing stolen Microsoft Entra ID application secrets to breach Microsoft 365 and Azure tenants at MSPs and their downstream clients, according to Todyl's report.1 outletCyber6 linked
57. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked
58. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.