ICYMI: 2026-07-24
Latest Headlines
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
Satellite Images Reveal How Suspected Scam Compounds Appear Out of Nowhere
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday
Data Breach Confirmed After Australian Energy Giant Origin Is Hacked
Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers
Certighost Active Directory CS Exploit Allows Low-Privileged Users to Compromise Domain
Bing Images Vulnerability Lets Attackers Execute Remote Code on Microsoft Servers
Cl0p Hackers Exploit Windchill Servers to Steal Companies’ Secret Product Designs
Apache Syncope Release Patches for Multiple RCE and SQL Injection Vulnerabilities
JetBrains Fixes Critical IntelliJ IDEA Code Execution Flaw and Four TeamCity Vulnerabilities
FakeAgent Campaign Uses Malicious Bing Ads and Claude.ai Artifacts to Infect Corporate Users
ChonkyChicken Malware Steals Chrome Credentials, Moves Laterally and Spies on Victims
Microsoft Confirms No Bloatware Ads in Windows 11; LG Disables McAfee Pop-ups
SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection
Hermes AI agent used to automate attack on Thai Finance Ministry
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Microsoft blames massive Microsoft 365 outage on maintenance bug
Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack
Man gets six years for hacking 750 women’s Snapchat accounts
Clop ransomware targets Windchill, FlexPLM in data theft attacks
– MTZ