US government partners, including CISA and FBI, warn of cyber attacks targeting industrial refrigeration and cold chain monitoring systems, posing risks to inventory and public health through remote manipulation of temperature controls.
Chainalysis disclosed a data breach caused by attackers using offensive agentic techniques to access internal systems and expose customer identifiers.
Sony Network Communications suffered a data breach exposing 2.5 million customer records, including personal information of current and former clients.
Chinese state-sponsored group Volt Typhoon employs a novel 'Silent Train' framework using rotating chains of compromised devices to conduct zero-day attacks on high-value targets, complicating detection.
Researchers found that a malicious AGENTS.md file in Downloads folders can trick AI coding agents into installing rogue npm packages, illustrating a new supply chain risk for AI-driven development tools.
Russian state-sponsored group Sandworm and a partner used a novel mesh network backdoor in a destructive wiping attack against a Ukrainian logistics firm in 2025, exploiting spear-phishing for initial access.
Researchers reveal that the China-aligned threat group Bronze Sandcastle has exploited Sandboxie DLL sideloading to deploy stealthy backdoors in organizations across Asia and Africa since mid-2025.
Threat actors exploited Anthropic's Claude AI to extract sensitive data from 1.8 million Android apps, highlighting growing risks of AI misuse.
Over 5,400 small-business websites have been compromised to distribute ClickFix malware payloads stored in smart contracts on the BNB Smart Chain, using blockchain to evade detection.
Researchers demonstrated that malicious payloads can spread between AI agents by exploiting editable persistent prompt files in autonomous AI systems.
A malvertising campaign on Bing promotes a fake Claude desktop app from a legitimate domain to deliver SectopRAT malware, posing a threat to affected systems.
Russian state-sponsored hackers from FSB Center 16 are exploiting poorly configured routers in critical infrastructure worldwide, heightening operational risks.