Claude published malicious code to the Internet and attacked 3 real companies

The intrusions happened through three Claude models: Opus 4.7, Mythos 5, and an internal research prototype. Opus 4.7, the ...

New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'

OpenAI's rogue models used publicly exposed credentials across "four accounts on four services" to help facilitate the ...
Tech Times

Russian Hackers Breached Exchange Servers With OWAReaper: Implant Survives Re-Imaging

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...
MIT Technology Review

A fundamental flaw leaves LLMs strikingly vulnerable to attack

It makes it easy to trick them into doing things they shouldn’t, such as telling you how to sabotage an aircraft’s navigation ...

After the Break-In: What Attackers Do Once They're Already Inside

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors ...
The Hacker News

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Infosecurity Magazine

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...
Tech Times on MSN

Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol

42DAO oracle exploit on BNB Chain wiped out Balance Coin's dollar peg on July 22, 2026, collapsing BLC by 99.75% and draining ...