Claude published malicious code to the Internet and attacked 3 real companies

The intrusions happened through three Claude models: Opus 4.7, Mythos 5, and an internal research prototype. Opus 4.7, the ...

New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'

OpenAI's rogue models used publicly exposed credentials across "four accounts on four services" to help facilitate the ...
Tech Times

Russian Hackers Breached Exchange Servers With OWAReaper: Implant Survives Re-Imaging

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...
MIT Technology Review

A fundamental flaw leaves LLMs strikingly vulnerable to attack

It makes it easy to trick them into doing things they shouldn’t, such as telling you how to sabotage an aircraft’s navigation ...

After the Break-In: What Attackers Do Once They're Already Inside

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors ...

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Infosecurity Magazine

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...