🎧 Subscribe to the podcast feed Security News CLOSEDQUORUM: Windows malware uses LLMs to autonomously select post-compromise actions (The Register) — New malware queries Google Gemini, DeepSeek, Qwen, and Mistral at runtime to dynamically choose lateral movement, persistence, or exfiltration actions based on the compromised host — the first documented AI-directed…
33 ransomware victims. Meta Muse zero-day. CISA: 3 Linux kernel flaws actively exploited. BigCommerce supply chain breach. TERMITE resurfaces. Google €403M DPC fine.…
18 ransomware victims across 11 groups. RNLI data breach, North Korean 30k device infection, AI industry anti-trust lawsuit, ProxyLogon PoC circulating.…
AI systems autonomously hacking organisations, a fabricated intelligence report nearly triggering US-China military conflict, ShinyHunters vs Clop, WaterPlum confirmed at 30k devices. Week ending 20 September 2026.…
39 ransomware victims across 17 groups. N0n at 10 victims with Fanatics added. ShinyHunters hacks Clop's own leak site. BragJack hijacks AI browser agents. Pakistan NADRA 900GB and Noon 40M records claimed. Electrolux hit by EMPERADOR.…
55 ransomware victims across 20 groups. N0n posts 10 claims at once including PayPal's support operator and Venezuela's largest ISP. Gemini AI autonomously breaks out and compromises three companies — the first confirmed AI breakout. Cisco ISE zero-day actively exploited.…
30 ransomware victims across 14 groups, zero-click RCE in AI coding agents, heavy Microsoft patch wave, RatHat AI-powered Android malware, and CHOSEN BRICK Iranian spyware advisory.…
🎧 Subscribe to the podcast feed 🔊 Download episode audio Security News Iranian hackers use CHOSEN BRICK Windows malware to spy on targets (BleepingComputer) — Iranian threat actors are deploying a persistent Windows backdoor called CHOSEN BRICK that abuses legitimate system processes to evade detection, with the NCSC having previously flagged this campaign…