30
30
45
57
60
30
60
57
57
55
57
30
45
57
57
30
30
30
30
57
30
42
45
60
How to connect AI usage to business value
OpenAI explained how ChatGPT Admin Console analytics link AI usage, spend, and Codex contributions to business outcomes.
OpenAI published guidance describing analytics features in the ChatGPT Admin Console that combine usage, credit, and token data across ChatGPT Work and Codex. The Insights task classifier groups messages into use cases such as software engineering and sales research, while an Outcomes view tracks Codex contributions to merged commits and lines of code. An Admin plugin and Admin API let teams automate reporting and combine AI analytics with business metrics like ticket resolution time or revenue.
20
Security through obscurity is dead, and AI delivered the fatal blow
AI agents are killing security through obscurity, accelerating vulnerability discovery and patch-gap exploitation, experts warn, with OT/ICS systems most at risk.
An opinion/analysis piece arguing AI has made security through obscurity obsolete, citing record vulnerability disclosure volumes after Microsoft's Patch Tuesday addressed 974 CVEs. FBI Cyber Division assistant director Brett Leatherman said latest AI models found significant vulnerabilities in open source libraries running on most web servers. The article cites at least four espionage crews (most suspected China-linked) exploiting Chromium's patch-gap window with a rapid exploit kit, and a five-agency advisory on AI-generated exploitation scripts breaching internet-exposed Siemens S7 Series PLCs at water, manufacturing, and energy facilities. Experts including John Hultquist, Chris Inglis, and Katie Moussouris warn AI erodes the expertise barrier protecting obscure OT/ICS systems while defensive AI patching lags, with studies showing AI-generated patches fail more than half the time.
52
Your passkeys can now move between password managers on Android
Google enabled direct password and passkey transfers between Android password managers, initiated from the destination app without unencrypted file exports.
Android now supports moving passwords and passkeys directly between password managers without exporting them to a file, replacing the previous unencrypted-export workflow. The transfer is initiated in the receiving app, which hands off to Android to detect installed managers and request authorization in the source app. The feature works today with Google Password Manager, 1Password, Bitwarden, and Dashlane, with more partners promised but unnamed. Google says data moves between apps in seconds and calls the handoff secure, without detailing the protections.
25
The 20 Most Common Passwords Hackers Target in 2026
Huntress details the 20 most common passwords of 2026 and how attackers use brute force, spraying, and credential stuffing against weak credentials.
Huntress published an awareness piece based on NordPass's seventh annual list of the 200 most commonly used passwords, compiled from exposed data in cyberattacks across 44 countries. The top passwords remain simple sequences and variants such as "123456", "admin", "password", and "P@ssw0rd", all crackable in under a second. The article explains four password attack types: brute force, password spraying, credential stuffing, and dictionary attacks. Huntress cites its own data showing more than 1 in 4 IT professionals consider employees' password habits their biggest weakness, and recommends avoiding common passwords, not reusing credentials, and combining letters, numbers, and symbols.
12
Muse can shop, write emails, and negotiate prices for users, all through WhatsApp
Meta launched Muse, a WhatsApp-controlled agent running on an isolated VM with a Sentinel gatekeeper, able to shop, email, book travel, and negotiate.
Meta introduced Muse, an autonomous agent controlled through WhatsApp that runs on its own cloud virtual machine, plans multi-step tasks, browses, fills forms, and negotiates on users' behalf. Payments run through Stripe's Link using one-time cards, which Meta calls the first AI agent covered by Link's purchase protection, with Shop Pay and 1Password integration planned. A second agent, Sentinel, gates all Muse network access and holds credentials, and a Muse Confidential VM with user-held encryption keys is planned later this year. Muse's model reportedly scored 44-48 on Artificial Analysis Intelligence Index v4.3, up from 31 for Muse Spark in April, near GPT-5.6 Sol's 47; it launches first in the US on iOS and Android.
72
Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware
Cisco Talos details ClickFix campaigns abusing fake Google CAPTCHA prompts, WebDAV and BNB Smart Chain to deploy the Amatera infostealer.
Cisco Talos identified a multi-stage campaign, first observed in April 2026 when a Ukrainian government organization executed a disguised DLL named verification.google from a WebDAV path. The chain combines ClearFake JavaScript injected via malicious Cloudflare Workers, EtherHiding payloads stored in BNB Smart Chain contracts, ClickFix social engineering, and WebDAV-hosted DLL loaders to deliver the Amatera (ACR Stealer) infostealer. The Amatera configuration contained over 400 collection entries targeting browsers, messengers, crypto wallets, password managers, FTP and VPN tools, hunting for .kdbx, .p12, .pfx and .pem files. The pf.ch branch deploys ZigCryptoStealer, an EDR-terminating vulnerable driver and Go-based reverse TCP proxies, while the verification.google branch installs NetSupport Manager, supporting moderate-confidence attribution of the UAT-10820 activity to a Russian actor.
55
Introducing Muse: The World’s First Personal AI Agent Built for Everyone
Meta launches Muse, a personal AI agent running in a dedicated Secure VM and powered by its Muse Spark model, with payments via Stripe Link.
Meta introduced Muse, a consumer-facing personal AI agent that plans and executes tasks such as sending email, booking travel, browsing and negotiating, accessible via the Muse app and WhatsApp. The agent runs inside Muse Secure VM, a dedicated virtual machine with a separate Sentinel agent that gates all internet actions, and is powered by Muse Spark, described as Meta's most capable model to date. Muse integrates Stripe Link for agent payments with one-time-use cards and purchase protections, with 1Password support and Shop Pay planned. It rolls out in the US on iOS, Android and muse.ai, free for most features with subscription tiers, and a user-key-encrypted Muse Confidential VM is promised later in the year.
78
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
Cisco Talos details ClearFake WebDAV chains delivering Amatera stealer to a Ukrainian government organization, with cryptocurrency and credential theft payloads.
Cisco Talos investigated DLL executions named 'verification.google' via WebDAV UNC paths at a Ukrainian government organization, tracking the actor as UAT-10820 and assessing with moderate confidence the activity is Russian and opportunistic rather than targeted. The infection chain uses ClearFake JavaScript injected via a Cloudflare Worker, EtherHiding storage on BNB Smart Chain contracts, and a ClickFix fake Google CAPTCHA prompt to deliver Amatera stealer. Secondary payloads differ by C2: one loader deploys ZigCryptoStealer with a Go reverse TCP proxy and a vulnerable driver that kills EDR, while the other installs an unauthorized NetSupport Manager with a Russia-based C2. Similar Amatera chains were separately documented by Malwarebytes and Blackpoint Cyber, but with no shared infrastructure.
55
OpenClaw Power, MacBook Simplicity: Five Days With Grok Bot
Hands-on review finds Grok Bot simplifies agent setup via browser logins and bot abstraction, contrasting with the user-owned OpenClaw platform.
After five days with Grok Bot, the reviewer highlights browser-based sign-in as the key differentiator: connecting X, Freshdesk, and Google Calendar required only logins, no MCP configs or API keys. The piece contrasts Grok Bot's managed 'agent computer' with OpenClaw 2.0's user-owned Gateway, which now supports reusing Claude Code or Codex logins and ships a native Codex runtime. Grok Bot introduces 'Bots' as composable units arranged in 'group chats', exemplified by an Agentic Engineer Bot routing tasks across Claude Code, Codex, and Grok Build CLI. The reviewer used Grok Bot with a Cursor Pro+ account.
38
The Collective Cyber Defense letter wrote your next vendor questionnaire
Op-ed argues the 200-company Collective Cyber Defense letter's three endorsed metrics should become standard vendor procurement questions.
More than 200 companies including Microsoft, Google, AWS, CrowdStrike, Anthropic and Okta signed an August 27 open letter calling for faster cyber defenses against AI-enabled attacks. The letter endorses three measurable metrics: coverage, containment speed, and verified remediation. The author turns those into five concrete procurement questions buyers should pose at vendor renewals, while noting the letter contains no deadlines, dollar figures or measurable targets.
28
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
OpenAI released GPT-5.6-Cyber for vulnerability research and pentesting via Daybreak Red, completing 95% of advanced cyber task evaluations.
GPT-5.6-Cyber, built on GPT-5.6 Sol, targets zero-day discovery, exploit chain development and incident response with reduced refusals, scoring 95.0% on OpenAI's Advanced Cybersecurity Completion Rate versus 1.5% for GPT-5.6 Sol and 57.3% for GPT-5.5-Cyber. The model found CVE-2026-15903 (CVSS 8.8), an out-of-bounds read/write in Chrome's V8 JavaScript engine that Google patched in mid-July 2026. It is available to trusted partners including CrowdStrike, Palo Alto Networks and Cloudflare through the Daybreak Red access tier.
78
30
60
30
30
30