ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

September 3, 2026 at 11:32PM The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A sim…

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

September 3, 2026 at 02:13PM The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Grou…

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

September 3, 2026 at 10:49AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security f…

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

September 2, 2026 at 11:57PM Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cyberse…

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

September 2, 2026 at 12:26PM The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-pe…

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

September 1, 2026 at 10:49PM Brazilian financial services, retail, and e-commerce organizations have become the target of a finan…

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

September 1, 2026 at 02:35PM METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research n…

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

September 1, 2026 at 12:52PM Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to n…

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

August 31, 2026 at 10:54PM Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) hav…

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

August 31, 2026 at 05:01PM Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials avai…

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

August 31, 2026 at 02:34PM A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VM…

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

August 31, 2026 at 01:26PM The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that seve…