HexStrike AI v6.0 has emerged as a comprehensive red team platform integrating 127 security tools with the BOAZ red team engine. This unified framework combines reconnaissance, exploitation, post-exploitation, and lateral movement capabilities into a single AI-driven interface. While marketed as a l
Pink Gang, a financially motivated threat actor group, has adopted the social engineering playbook pioneered by the notorious Lapsus$ collective. The group is now deploying fake helpdesk phone calls to trick employees into surrendering their credentials, combining old-school vishing (voice phishing)
Brave Software has launched Origin, a subscription-based browser that removes cryptocurrency wallets, AI features, and ads while maintaining core privacy protections. Priced at $4.99/month or $49.99/year, Origin targets users seeking a streamlined browsing experience without monetization schemes. Th
Cybercriminals are cloning legitimate cybersecurity tool websites—specifically Ghidra, dnSpy, and SpiderFoot—to distribute malware to security professionals and developers. These sophisticated clones mimic official sites and use typosquatting domains to trick victims into downloading trojanized vers
The Cybersecurity and Infrastructure Security Agency (CISA) is facing a substantial $250 million budget reduction following congressional appropriations decisions, sparking intense political debate between House Democrats and Republicans. This significant funding cut threatens to impact critical cyb
Popular VPN browser extension Hola was compromised through a supply chain attack that delivered cryptocurrency mining malware to Windows users. The malicious version of the software silently installed XMRig cryptominer on victim systems, hijacking CPU resources to mine Monero cryptocurrency. Users w
Elon Musk’s X Corp (formerly Twitter) has intensified efforts to terminate Federal Trade Commission privacy audits mandated by a 2011 consent decree. The company argues the audits are overly burdensome and politically motivated, while the FTC maintains they’re necessary to verify compliance with dat
Microsoft’s AI Red Team has identified seven previously undocumented failure modes in agentic AI systems after a year of intensive testing. These vulnerabilities—spanning prompt injection variants, tool manipulation, and autonomous decision-making flaws—represent systemic risks in AI agents that int
ISO 42001:2023, the world’s first AI management system standard, fundamentally changes how organizations must approach cloud-based AI data risk. This certification framework mandates comprehensive risk assessment, data governance, and accountability measures specifically designed for AI systems. Org
A sophisticated email compromise targeting a stock exchange executive’s Microsoft Outlook account remained undetected for five months, with attackers establishing persistent access to exfiltrate credentials and sensitive communications. The breach leveraged compromised credentials and stealthy inbox