Friday, April 24, 2026

AI

AI-Powered Email Attacks – Iranian Threat Groups Targeting Cybersecurity Experts and Academics

Iranian state-sponsored cyber groups have significantly enhanced their offensive capabilities in the aftermath of June 2025 military strikes, deploying sophisticated AI-crafted phishing campaigns that specifically target cybersecurity researchers and academic institutions. The escalation represents a concerning evolution in Tehran's cyber warfare tactics, with Advanced...

Google’s AI ‘Big Sleep’ Identifies SQLite 0-Day Vulnerability in Active Use

Google's artificial intelligence-powered security tool Big Sleep has achieved a cybersecurity milestone by discovering and preventing the active exploitation of a critical zero-day vulnerability in SQLite, marking what the company believes is the first time an AI agent has directly thwarted real-world cyberattacks. This...

Gmail Exploit Used to Trigger Code Execution in Claude AI

A cybersecurity researcher has successfully demonstrated how a carefully crafted Gmail message can trigger code execution through Claude Desktop, Anthropic's AI assistant application. The attack, disclosed by Golan Yosef, Chief Security Scientist and Co-Founder of Pynt, reveals critical vulnerabilities in how AI systems handle...

GLOBAL GROUP RaaS Operators Launch AI-Driven Negotiation Capabilities

The emergence of GLOBAL GROUP, a sophisticated new Ransomware-as-a-Service (RaaS) operation that leverages artificial intelligence to enhance ransom negotiations and streamline affiliate operations. The group, which appeared on the Ramp4u forum on June 2, 2025, has already claimed 17 victims across multiple countries and...

AI-Powered Crypto Heist – Hackers Swipe $500,000 Using Malicious Extension

Cybercriminals have successfully orchestrated a sophisticated attack targeting blockchain developers, stealing $500,000 in cryptocurrency from a Russian developer through a malicious code extension designed for AI-powered development environments. This incident highlights the growing threat of weaponized open-source packages in the cryptocurrency ecosystem. The Sophisticated Deception In...

McDonald’s AI Hiring Bot Exposed Millions of Job Applicants’ Data With Weak ‘123456’ Password

A massive data breach affecting McDonald's AI-powered hiring system, revealing that millions of job applicants' personal information was accessible through laughably weak security measures, including a password as simple as "123456." Security experts Ian Carroll and Sam Curry discovered alarming vulnerabilities in McHire.com, McDonald's job...