Cybercrime

Akira ransomware reboots into Windows Safe Mode to knock EDR offline

The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process.

AI agents wage near-autonomous cyberattack on Asian government networks

A multi-agent attack using open-source AI frameworks executed a coordinated intrusion over four days.

Trump administration opens door to private-sector cyber offensives

The program could allow vetted private US companies to access targeted systems without the owner’s authorization and, in more disruptive operations, damage or destroy systems or infrastructure.

Researcher bypasses Microsoft Defender security patch, seizing control

The PoC posted by Nightmare Eclipse, who has been feuding with Microsoft for months, enables an attacker with any level of access to gain system-level privileges.

Lyrie.ai Joins First Batch of Anthropic’s Cyber Verification Program

4 million fake applications and one blind spot: A SOC playbook for OAuth client ID spoofing

Two campaigns created 4M+ fake identities to enumerate Microsoft Entra ID accounts — without logins. Learn how to detect the behavior, not the threat.

Trojanized AI skills gain 1.7M installs in agent-targeted attack

Typosquatting on popular AI services Paperclip and Browser Use, the malicious skills cracked skills.sh’s trending list, instructing agents to install a credential stealer from GitHub instead.

Snowflake attacker pleads guilty to hack of 165 companies’ data

Connor Riley Moucka faces between 2 and 30 years in prison for the hacks.

What does a data breach cost? AI is a sizable factor

Abuse of AI tools is driving up the financial fallout of security incidents, spurring the need for CISOs to fight fire with fire by adopting AI technologies into their security operations.

Meta joins OpenAI, Anthropic in latest AI test breach

Third disclosure in weeks raises fresh concerns over how frontier AI models are contained during cyber evaluations.