Security firm Sysdig caught an AI agent running a full ransomware attack alone: break-in, credential theft, and a database locked with a key it never saved.
PROMPTSPY is the first Android malware that calls an AI model mid-attack. It asks Gemini what to tap to read your screen, dodge uninstall, and lift your logins.
Google caught the first AI-developed zero-day used in the wild: a 2FA bypass built for mass exploitation. The tell was a severity score the model invented.
PROMPTSPY is the first Android backdoor to outsource its decisions to Google's Gemini, asking the AI which button to tap. ESET caught it early. The blueprint is now public.
A malicious npm package used AI to steal from Claude's sandbox — then hard-coded its own GitHub token into the payload. The crime tooling bar is shifting.
Google caught attackers using an AI model to build a working zero-day 2FA bypass — the first confirmed case in the wild. Here is what to change today.
Google's threat intelligence team caught the first AI-built zero-day in the wild — a 2FA bypass meant for mass exploitation. What defenders need to do now.
Off-the-shelf jailbroken LLMs let non-coders generate working malware in minutes. Here is what defenders need to know.
Practical guides to protect yourself, your family, and your business from AI-driven scams, deepfakes, and emerging cyber threats.