Webinar: Analyzing Real Google Workspace Breaches and Early Response Decisions
A September 23 webinar from BleepingComputer and Material Security examines real Google Workspace breaches and the response decisions that shaped their outcomes
ThreatsThreat Intelligence Feed
-
-
BambooToken Malware Uses MQTT Protocol to Control Windows and Linux Systems
BambooToken malware has targeted organizations across Asia and South America since 2023, using the MQTT protocol for command-and-control over Windows and Linux
VPN & Privacy -
Bruce Schneier's DEF CON Talk on AI Hacking
Schneier's DEF CON talk on AI hacking drew over 100K YouTube views. It combines insights from his 2022 book with current AI hacking behavior.
Threats -
AI Agents Can Find Exploits From Rumors Alone
AI agents can locate vulnerabilities with only a vague description of a bug. This threatens existing open source embargo practices for security disclosures.
Tools -
Anthropic Discloses Fourth AI Model Breach of Real-World Systems
Anthropic has disclosed a fourth incident in which its AI models breached real third-party systems, tracing the root cause to biased reasoning and recklessness.
VPN & Privacy -
IABs Use Voice Phishing and Graph API to Breach Microsoft 365
Threat actors call employees on personal devices, steal Microsoft credentials, then use the Graph API to quietly exfiltrate corporate data at scale.
Tools
Analysis & Guides
Threats
cPanel Patches CVE-2026-67401 SQL Injection Flaw Enabling Root Access
A new cPanel flaw lets an authenticated hosting account achieve root-level code execution via SQL injection in EmailTrack. All supported versions are affected.
Guides
Ohio Man Gets 15 Years for AI Sextortion and Cyberstalking
James Strahler II was sentenced to 15 years for cyberstalking, AI-generated sextortion, and child sexual abuse material. He is the first person convicted under
Tools
Trezor Data Breach Expands to 81,000 Customers After ShipMonk Failure
A breach at Trezor's shipping provider ShipMonk has grown to affect 81,000 customers after the provider failed to delete data as contractually required.
Guides
Microsoft Teams and Outlook Fail to Launch on ARM Windows PCs
Microsoft is fixing a bug causing Teams and new Outlook to crash on ARM devices after August 2026 Patch Tuesday updates. A temporary workaround is available.
Threats
Shai-Hulud Infostealer Worm Now Scans 469 Credential Locations
A new Shai-Hulud variant scans 469 locations for developer credentials, up from 189. Securing the credential layer is now the core supply chain defense priority
VPN & Privacy
Comcast Adds Motion Detection to Wireless Routers, Shares Data with Third Parties
Comcast has added WiFi-based motion detection to its routers. The feature can share motion data with third parties, including law enforcement.
Threats
Novocure Data Breach Exposes Records of 1,400 Cancer Patients
Novocure disclosed a mid-August cyberattack exposing over 1,400 U.S. patient records and employee contact data. No medical devices were accessed.
Tools
Cronos Blockchain Restarts After $74 Million Tectonic Exploit
A price-manipulation attack on Tectonic drained $74 million in borrowed assets. Cronos halted and restored the blockchain to a pre-exploit state.
VPN & Privacy
Two RCE Flaws Found in Unitree G1 EDU Humanoid Robot
Two root RCE vulnerabilities in the Unitree G1 EDU robot allow network-adjacent and BLE-based code execution. No confirmed fixed firmware version exists.