PoC proves that attackers can leverage AI to exploit cloud weaknesses at machine speed.

Attackers abuse Microsoft 365 mailbox rules to hide activity, steal data, and persist after password resets.

Google says UNC6783 leverages social engineering and phishing campaigns to gain entry to the BPOs.

It's easy to mount ransomware attacks upon SaaS and cloud assets, a researcher said at the BSides SF 2026 hacker conference.

This episode is all about trust getting abused at scale. We start with Chinese-nexus operators pivoting fast onto Qatar using conflict lures and familiar tradecraft. Then we hit banking, because they deserve it: Lloyds, Halifax, and Bank of Scotland customers seeing other people’s transactions in-app, a straight confidentiality failure, not “som...

The ShinyHunters cybercrime group has systematically targeted Salesforce instances since mid-2025.

GTIG points out that this campaign had no overlaps with other PRC activities, such as Salt Typhoon.

SSHStalker blends IRC control with automated SSH attacks; compromise 7K cloud-hosted Linux systems.

Google will develop artificial intelligence that PwC will roll it out to Fortune 500.

The top social engineering attacks involve manipulating human psychology to gain access to sensitive information or systems. The most prevalent methods include various forms of phishing, pretexting, and baiting, which are often used as initial entry points for more complex attacks like business email compromise (BEC) and ransomware deployment. How...