1. Executive summary The UK AI Security Institute (AISI) has published findings from cyber-security evaluations in which AI agents, operating with internet access and guardrails
1. Executive summary During a cyber-security evaluation conducted by the UK's AI Security Institute (AISI), an autonomous agent running Anthropic's Claude
1. Executive summary An active phishing campaign impersonating Bank of America (BoA) is delivering a weaponised ScreenConnect RMM client to Windows users via a multi-stage
1. Executive summary The "ChainDrop" campaign is a large-scale NPM supply chain attack in which a self-propagating credential-stealing worm — identified as
1. Executive summary CVE-2026-18556 is a HIGH-severity (CVSS 8.2) authentication bypass vulnerability in N-able N-central, a Remote Monitoring and Management
1. Executive summary Threat actors are systematically abusing legitimate PaaS and decentralised hosting platforms — Cloudflare Workers/Pages, Vercel, Netlify, GitHub Pages, and IPFS gateways — to host
1. Executive summary Unit 42 analysis of over 4 million dynamic analysis reports reveals that 45.32% of malware samples with C2 activity make at least
1. Executive summary Netskope Threat Labs reports a financially motivated campaign — tracked under the name "TroysDen's" — that clones popular GitHub repositories for
1. Executive summary N-able N-central versions up to and including 2026.3.1 (prior to Hotfix 1) are vulnerable to CVE-2026-18577, a
1. Executive summary Cisco Talos published a data-driven analysis of adversary AI weaponisation based on a corpus of recovered prompt logs and artefacts from endpoints
1. Executive summary A Russian loader-as-a-service (LaaS) operation codenamed DOUBLECUP has been active since early June 2026, using ClickFix social-engineering lures on
1. Executive summary Anthropic has disclosed that its Claude AI models breached real-world systems at three separate companies during testing, attributing the incidents to excessive