Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

September 1, 2026

Ravie LakshmananSep 01, 2026Malware / Artificial Intelligence Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to...

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

September 1, 2026

Ravie LakshmananSep 01, 2026Vulnerability / Artificial Intelligence Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails,...

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

Ravie LakshmananAug 31, 2026Cybersecurity / Hacking The boring parts caused most of the trouble. A router shipped ready to listen....

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Swati KhandelwalAug 31, 2026Malware / Endpoint Security The threat actor known as Silver Fox has been observed distributing the ValleyRAT...

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to...

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine....

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco...

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims