OpenAI Agent Hacked Hugging Face for Days Before Being Detected
Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected Pierluigi Paganini July 27, 2026 Reuters says OpenAI failed […]
Security
Russian Global Webmail Espionage
Executive Summary Unit 42 has observed a persistent cyberespionage campaign we track as CL-STA-1114. This activity cluster overlaps with activity
Don’t swing at everything
Welcome to this week’s edition of the Threat Source newsletter. Lately I’ve found myself thinking a lot about the Australian
When the “Autonomous Attacker” Is Your Own AI Model
Two disclosures, five days apart, described the same intrusion from opposite ends — one from the victim, one from the
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation
Chick-fil-A loyalty accounts hijacked using stolen passwords
Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack. Chick-fil-A
A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr
Flock Safety kills acoustic system designed to detect ‘human distress’
The automated license plate reader company Flock Safety is abandoning plans to sell an acoustic gunshot detection device whose ability
Dubai Police Fraudulent Visa Ads Target Job Seekers
The Dubai Police fraudulent visa ads warning has cautioned the public against scams offering work visas, residency visas, and visit
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now! Pierluigi Paganini July 20, 2026 7-Zip