Search: “Copilot”

22 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 189 Policy & legal 71 Industry 59 AI safety & security 56 Malware 52 Exploit / PoC 39 Data breach 38 Ransomware 32 Threat actor 25 Phishing & fraud 23 AI industry 20 AI policy 15 Model release 12 AI tools & infra 11

SeverityAll critical 235 high 98 medium 160 low 90 info 87

Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies

The Hacker NewsFeb 18, 09:49 UTC · Feb 18, 2026Malware

Microsoft reverses course, makes Recall feature opt

The RecordJun 7, 18:53 UTC · Jun 7, 2024Malware1

Malware can steal data collected by the Windows Recall tool

Security AffairsJun 5, 21:10 UTC · Jun 5, 2024Malware

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

Weekly ThreatsDay bulletin details a ShinyHunters-style social engineering hit on ReliaQuest, the 296,000-device Dysphoria IoT botnet, and several new malware families.

ReliaQuest confirmed a social engineering attack on August 22, 2026, in which an attacker used a fake SSO page and MFA push approval to gain brief view-only access to an identity dashboard, with tactics matching ShinyHunters, which has since listed the firm on its leak portal. The Shadowserver Foundation reported the Dysphoria botnet has compromised nearly 296,000 IoT devices for DDoS attacks and recently added residential proxy capability. Cisco Talos documented JWR, an operator-driven phishing-as-a-service framework linked to The Outsider that harvests credentials, identity documents, and 2FA codes over an encrypted WebSocket. New malware coverage includes the Octagon Android fraud bot ($1,400/month), the C2Looper Rust backdoor delivered via ClickFix, and the Aeternum loader that moved C2 to the Polygon blockchain.

The Hacker NewsSep 1, 17:35 UTC · 14d agoMalware in the wild

Model Security Is the Wrong Frame

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Malware

European AI adoption hits 99% with regulated data driving most policy violations

Help Net SecurityJun 19, 11:23 UTC · Jun 19, 2026Malware

Darktrace / Email strengthens behavioral detection, DLP, and SOC integrations

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2025Malware

Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs

Iran-linked Mirage Kitten uses fake LinkedIn job challenges to deliver new cross-platform RATs NodeRabbit and PollCat to developers in fintech, aviation, and aerospace.

PolySwarm documented a campaign by Iran-linked Mirage Kitten (UNC1549) that uses fake recruiter personas and technical hiring challenges on LinkedIn to deliver the newly documented RATs NodeRabbit and PollCat, which run on Windows, Linux, and macOS. A challenge archive bundles a fake npm package (colorized_terminal 2.1.0) in node_modules that loads NodeRabbit, while a React-based challenge delivers PollCat with an attacker-controlled OTP screen. NodeRabbit persists through a malicious Visual Studio Code extension and Git post-merge/post-checkout hooks; PollCat persists via scheduled tasks, cron, and LaunchAgents. Victims were observed in fintech, aviation, and aerospace, with confirmed targets in Egypt, Ethiopia, and Afghanistan.