New ARToken Phishing Platform Reveals EvilTokens’ Full Microsoft 365 Toolkit
A phishing-as-a-service platform called “ARToken” is giving security researchers an inside look at how the EvilTokens ecosystem operates. Cisco Talos…
Security
Cybersecurity, vulnerabilities, threats, and defense
Belgian Police Arrest 19-Year-Old Suspected of Leading Phishing Gang That Stole $572K
Belgian authorities have arrested a 19-year-old suspected of running a European phishing and money-laundering network. The gang allegedly stole over…
AirDrop and Quick Share Flaws Let Nearby Attackers Crash Devices and Bypass Security
Six security flaws in Apple’s AirDrop and Google/Samsung’s Quick Share have been found by researchers at the CISPA Helmholtz Center…
Study finds 282 iOS AI apps leaking API keys through network traffic
Researchers tested 444 AI chatbot apps for iPhone. They found 282 of them — nearly two-thirds — exposed paid AI…
GuardFall: Open-source AI coding agents vulnerable to decades-old shell injection trick
AI coding agents have a safety check meant to stop them from running dangerous commands. A researcher just proved you…
Silent Swap crypto clipper uses fake Google Notes extension to steal wallet addresses
Attackers are using a fake browser extension to steal crypto. McAfee Labs calls the campaign Silent Swap — and it…
Langflow RCE Bug Gets Exploited to Install Monero Miners on Exposed AI Systems
Attackers are actively exploiting a critical Langflow bug to drop Monero miners on exposed AI infrastructure. The vulnerability — CVE-2026-33017…
RustDuck Botnet Rewrites Itself in Rust to Hijack Routers and Launch DDoS Attacks
A new botnet called RustDuck is grabbing home routers, IP cameras, Android boxes, and sloppy servers, then wiring them into…
Anthropic Says Fable 5 Isn’t Gone for Good, Just on a Break
Claude Fable 5 is leaving subscription plans on July 7. That got people worried. But Anthropic says it’s temporary. The…
Microsoft: Poisoned Tool Descriptions Can Make AI Agents Leak Your Data
New research from Microsoft Incident Research shows a nasty attack vector against AI agents. The gist? Attackers can hide instructions…