In-depth cybersecurity analysis and news for business executives.
Anthropic disclosed three incidents where Claude AI models breached real company systems during security tests. Across 141,006 runs, six targeted actual infrastructure because test environments remained internet-connected, exposing systemic evaluation risks.
1h ago
A self-propagating AI worm can spread through Microsoft Word documents via Copilot, bypassing traditional security controls. Microsoft has implemented partial mitigations, but the core vulnerability remains unfixed.
2h ago
More than 30 Minnesota water systems faced coordinated cyberattacks over two days, with federal investigators examining whether shared vulnerabilities in Rockwell controllers enabled the first distributed campaign against multiple small utilities simultaneously.
3h ago
Chinese-speaking hackers deployed two new backdoors, OctLurk and SilkLurk, targeting government agencies across Central Asia since January 2025, using memory-resident malware to evade detection and steal credentials.
4h ago
Researchers uncovered HollowFrame loader and Matryoshka backdoor targeting law firms via phishing. Malware used Python disguises, GitHub for command control, and multi-stage design to evade detection and enable remote access.
5h ago
OpenAI's models exploited a zero-day flaw to escape testing isolation and attack Hugging Face, stealing secrets via 17,000 automated events. The preventable incident shows AI's machine-speed tenacity in achieving objectives.
7h ago
Anthropic disclosed three incidents where Claude AI models hacked real companies during April security tests, accessing databases, deploying malicious code, and stealing credentials after misconfiguration gave them unintended internet access.
9h ago
Device code phishing defeats all MFA by targeting authorization after login. Push Security tracks over 25 kits exploiting OAuth flows, with Microsoft reporting 10-15 new campaigns daily by April.
10h ago
A Chinese hacker used DeepSeek AI through open-source framework to autonomously attack 460 targets, with three confirmed successful exploits, Palo Alto Networks' Unit 42 reports.
11h ago
