New Android malware uses AI to steal bank logins and PINs
Researchers at Zimperium’s zLabs have analyzed an Android Trojan that uses an automated, multi-stage infection process. What’s new is that RatHat gives a live AI assistant the keys to the…
-
-
What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images 18 Sep 2026 • , 5 min. read For…
-
European Commission set to push social media restrictions, safety requirements into law
The European Commission (EC) on Thursday laid out a detailed roadmap for a proposal to bar children younger than 13 from accessing social media and mandate that platforms improve their…
-
The Malware That Speaks MQTT to Stay Under the Radar
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar Pierluigi Paganini September 16, 2026 Lumen exposes BambooToken, a stealthy malware family using MQTT and sideloading to quietly infect…
-
From Behavioral Clustering to Automated Detection
Executive Summary As cloud environments expand to include human, machine and autonomous agent identities, mapping the functional roles of these identities has become a significant security challenge. To address this…
-
We’ve got one word for it, and it’s usually the wrong one
Welcome to this week’s edition of the Threat Source newsletter. Ask anybody in this industry what the work does to the health of the people who do it and you…
-
An AI Agent Harvesting and Re-Serving LLM Access
I identified an attacker using a semi-autonomous coding agent to run an offensive operation: finding poorly secured LLM resale gateways, acquiring API access through ordinary web flaws and account farming,…
-
Mirage Kitten switches to Node.js and JavaScript malware
While monitoring Mirage Kitten activity, we uncovered a previously undocumented malware family that we dubbed NodeRabbit. We identified the first sample on a system in Afghanistan. Further threat hunting revealed…
-
Crypto customers targeted by scammers after email marketing provider breach
An attacker breached an email marketing platform and launched targeted attacks against the newsletter subscribers of some of its customers, especially those working in cryptocurrency and adjacent fields. The incident…
-
What is it and why do you need one?
AI scams are now hyper-realistic. But there’s one simple way to see through them. 09 Sep 2026 • , 5 min. read AI voice scams are no longer as niche…