⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.
65
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 20, 2026
- Last mentionedAug 28, 2026
Timeline
4 articles · newest firstSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Google tracked three suspected Russian espionage clusters abusing OAuth flows, app passwords, and WhatsApp linking to hijack accounts of diplomats and defense targets.
72
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
Google tracks three Russia-linked espionage clusters abusing OAuth, app passwords, and device code phishing against Western researchers and diplomats.
82
Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia
Suspected Russian clusters abuse OAuth and authentication flows to phish academia, defense, government, and think tank targets across Europe and the US.
78
Related CVEs
by mentions- CVE-2026-194786%9.1Unauthenticated GraphQL Code Injection in GitLab CE/EE Enables Data Tampering
Appears with
- UNC7005threat actor · 4
- UNC6293threat actor · 4
- Google Threat Intelligence Grouporganization · 3
- Googlevendor · 3
- WhatsAppproduct · 2
- Storm-2945threat actor · 2
- APT29threat actor · 2
- HEADRUSHmalware · 1
- Visavendor · 1
- VIDARmalware · 1
- watchTowrorganization · 1
- ZoomEyeorganization · 1
- Cloudflare Workersproduct · 1
- Volexityorganization · 1
- Siemens S7product · 1
- Censysorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.