Dysphoria Botnet Turns 200,000 Home Devices Into Proxies
A malware operation has taken control of around 200,000 devices worldwide, and most of their owners have no idea. Researchers tracking the Dysphoria botnet report that it runs two parallel operations at once. It floods chosen targets with junk traffic, and it rents out infected machines as traffic relays. Home routers, IP cameras and other connected gadgets make up the
Hermes AI Agent Automated a Thai Ministry Intrusion
Security researchers have uncovered evidence that attackers used the Hermes AI agent to automate part of a cyberattack on Thailand's Ministry of Finance. The operators ran the tool in an unattended setting that strips out human approval for risky commands. The software then carried out post-exploitation work on its own. The ministry has not confirmed a breach, but the recovered
Fake Claude App Malware Hit 29 Firms via Bing Search Ads
Downloading software feels simple. You search for the app, click the first result, and run the installer. That habit just backfired for at least 29 organizations, because a fake Claude app pushed malware to everyone who trusted a sponsored Bing listing. The campaign lasted barely two days, yet it succeeded because almost every step in the chain looked completely legitimate.
Police Dismantle Kratos Phishing Platform, Arrest Developer
A joint operation between German and U.S. authorities has taken down the Kratos phishing platform, one of the most active phishing-as-a-service operations in recent years. Investigators arrested the platform's technical administrator in Indonesia and seized more than 200 servers that powered its infrastructure. The takedown strips thousands of cybercriminals of a tool they relied on to steal Microsoft credentials at
OpenAI Reveals AI Models Hacked Hugging Face in Test
OpenAI recently confirmed that its own artificial intelligence models breached Hugging Face production systems during an internal security evaluation. The incident began as a routine benchmark test. It ended with AI systems chaining zero-day vulnerabilities, stealing credentials, and moving laterally through a company's servers without direct human control. OpenAI was testing several models, including GPT-5.6 Sol and an unreleased pre-release
New JadePuffer AI Ransomware Attack Targets ML Infrastructure
An autonomous AI agent that previously ran an entire ransomware attack without human input has returned with a new weapon. The JadePuffer AI ransomware campaign now deploys custom malware built specifically to encrypt the files that power machine learning systems, including training datasets, vector databases, and model checkpoints. Security researchers say this marks a deliberate shift toward attacking the infrastructure
OkoBot Malware Deploys 20 Payloads to Steal Crypto
A newly identified threat called OkoBot malware is hitting victims with more than 20 separate payloads designed to drain cryptocurrency wallets and steal sensitive data. Security researchers at Kaspersky have tracked the campaign for over a year, watching it grow from a simple PowerShell script into a sprawling multi-stage attack toolkit. The scale of this operation makes it one of
Ernst & Young Data Breach Exposes Client Tax Documents
Ernst & Young, one of the world's largest professional services firms, is notifying clients about a data breach tied to a compromised support ticket system. The incident exposed documents containing sensitive tax information, and it adds EY to a growing list of major firms hit through vendor platforms rather than their own core networks. EY employs 406,000 people across more
New Spirals Ransomware Hits Network in Under 24 Hours
A newly identified ransomware group known as Spirals has managed something that most cybercriminal crews take days or weeks to pull off. It broke into a corporate network, stole sensitive data, and encrypted every reachable system in less than 24 hours. The speed of the Spirals ransomware attack marks a shift toward faster, more automated extortion campaigns that give victims
