Aurora ransomware actors have been observed abusing SpaceX’s AI Cursor Agent as part of exploitation campaigns, according to a new study by Gambit Security’s Threat Intelligence team. The threat actors ran Claude Sonnet through Cursor Agent to assist with various… Read More "Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations"
Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Gia
More than 100 tech and cybersecurity companies, including OpenAI, Anthropic, Google and Microsoft, have warned there is a “narrowing window” to act before AI-enabled attacks escalate to a level that puts critical public services at severe risk. “In the coming… Read More "Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Gia"
Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign
A two-month phishing campaign used scalable vector graphics (SVG) attachments disguised as voicemail files to smuggle obfuscated JavaScript past email defenses, with 26,589 messages detected across 5527 organizations. Email security vendor INKY, which is part of Kaseya, detected and flagged… Read More "Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign"
OpenAI Agent Swarm Hacks RubyGems Package Manager
A cyber-attack on a popular open source package manager in May was the work of OpenAI agents, security researchers have revealed. Starting on May 11, the agents apparently flooded the RubyGems platform with malicious packages, forcing it to suspend new… Read More "OpenAI Agent Swarm Hacks RubyGems Package Manager"
ShinyHunters Defiant After FBI Calls on Members to Come Forward
The FBI on Tuesday called on ShinyHunters group members to come forward in the wake of the alleged leader’s arrest. The suspected leader, Pepijn van der Stap, of Amsterdam, was arrested on September 15 in the Netherlands while on probation… Read More "ShinyHunters Defiant After FBI Calls on Members to Come Forward"
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Ravie LakshmananSep 30, 2026Malware / Artificial Intelligence Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity… Read More "Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures"
Hackers Exploit Maximum Severity Flaw in GitLabs
GitLab users are being urged to patch a maximum severity vulnerability in the platform after reports of “in-the-wild” exploitation. CVE-2026-85706 is described as an “improper limitation of a pathname to a restricted directory,” or “path traversal” flaw. The DevSecOps orchestration… Read More "Hackers Exploit Maximum Severity Flaw in GitLabs"
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks
Russian state-sponsored APT Star Blizzard has updated its tactics, techniques, and procedures (TTPs) in recent attacks to evade detection, Microsoft says. Believed to be subordinate to the Russian Federal Security Service (FSB) Centre 18, Star Blizzard is known for launching… Read More "Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks"
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login… Read More "Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager"
Revolut Confirms Data Breach Through Fake Government Requests
Revolut has confirmed it has suffered a data breach that has affected customers. Speaking to Infosecurity on September 14, a Revolut spokesperson said an unauthorized third party submitted “fraudulent requests for information” using a “legitimate government agency domain email.” Revolut… Read More "Revolut Confirms Data Breach Through Fake Government Requests"