3+ day, 11+ hour ago   (532+ words) KnowBe4 found hackers abusing trusted Google services to hide phishing pages that steal Microsoft credentials and enable persistent ScreenConnect remote access. A familiar Google address in a suspicious email may be exactly what attackers want you to trust. KnowBe4 Threat Lab uncovered…...

3+ day, 12+ hour ago   (750+ words) Researchers found 220.8 million passenger and crew records exposed through default credentials in a Vietnam-linked database containing sensitive travel data. Changing default credentials should be a no-brainer, yet researchers still found a route into a database holding more than 220 million passenger…...

3+ day, 20+ hour ago   (323+ words) The quantum threat may still be ahead, but the work to prepare for it has already started. The G7 says uncertainty over when a cryptographically relevant quantum computer will emerge is no reason for organizations to delay preparations. On Sept. 3, 2026, the…...

4+ day, 16+ hour ago   (580+ words) BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond. CloudSEK discovered BigBear 2.0 in June 2026 after gaining access to the operation’s administrative panel. The panel contained 5,137 records associated with 461 targeted…...

5+ day, 17+ hour ago   (650+ words) OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment. OpenAI agents turned an obscure German-language programming wiki into an unauthorized message board and continued posting after its administrator…...

5+ day, 21+ hour ago   (568+ words) Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations. Cloudflare has announced Vulnerability Discovery and Remediation, a new service designed to automate vulnerability discovery, generate code fixes, and deploy edge…...

1+ week, 1+ day ago   (772+ words) Most enterprises would say they have a cyber resilience strategy. They back up data with platforms like Veeam, Rubrik, or Cohesity. Identity is managed through Okta or Microsoft Entra ID. Cloud infrastructure lives across AWS, Azure, and Google Cloud. Network and…...

1+ week, 3+ day ago   (729+ words) After more than two decades online, one of the internet’s longest-running botnets has finally lost control of its infected machines. CrowdStrike said its Counter Adversary Operations team disrupted the Sality peer-to-peer (P2P) botnet on Aug. 31 in coordination with U.S. and international…...

2+ week, 1+ day ago   (611+ words) Russian-speaking cybercriminals repeatedly told Cursor’s AI agent they were conducting legitimate security tests while using the tool during attacks on corporate networks, according to cybersecurity firm Gambit Security and data reviewed by Reuters. The campaign shows how commercial AI tools…...

2+ week, 4+ day ago   (613+ words) Trust is becoming the attack surface. Today’s threats are exploiting everything from forgotten cloud credentials and convincing phishing lures to trusted software and nearby devices. Read past newsletters here. Thousands of Leaked AWS Keys Still Work Thousands of publicly exposed…...