Cybercrime

US authorities warn of Russian attacks on critical infrastructure

Vulnerable and misconfigured routers appear to be the initial point of attack.

Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware module that deliberately discards encryption keys, making recovery impossible.

Agentic AI identity: A 6-stage maturity model for non-human identities

As agentic AI and autonomous agents trend in 2026, enterprises face a major new hurdle: standard IAM stacks aren't built to govern these non-human actors.

GitHub’s public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer activity.

SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft

Cybercriminals exploit India’s tax filing season with a dual-malware campaign

A multi-stage phishing campaign is impersonating India’s Income Tax Department to deploy both Gh0st RAT and AsyncRAT, giving attackers redundant access through separate C2 infrastructure.

Watch out for fake support calls in Microsoft Teams

Palo Alto Networks‘ Unit 42 warns of new campaign to steal sensitive information and files.

Why The Gentlemen ransomware is a test of identity and recovery controls

The ransomware’s use of trusted administrative tools and recovery-disruption tactics shows why containment, not just endpoint detection, is becoming central to enterprise defense.

AI agents fall for indirect prompt injection traps

Hidden instructions on websites con agents into falling for scams that a human would see through, Zscaler found.

This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally and encrypted more than 1,300 database records, marking what Sysdig describes as the first documented end-to-end agentic ransomware operation.