Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there’s no confirmation that it’s actually been deployed in the wild.
Attackers impersonated LastPass Authenticator on fake GitHub pages to deliver the Rapuncel infostealer in a campaign involving 40 fake brands.
Read More Fake LastPass Authenticator Pages Deliver Rapuncel Infostealer
Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?
Read More ‘We Have Enough AI’: Realism in a Time of Relentless Hype
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere.
Read More US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
Messages delivered through legitimate third-party email infrastructure had C-suite sender display names, custom signatures, and direct approval notes.
A Russian web developer allegedly behind a massive bank account takeover scheme was extradited to the U.S.
Read More Russian National Extradited to US to Face Bank Account Takeover Charges
