SparTech Software

Attackers are impersonating Claude, ChatGPT and Copilot to deliver malware and steal sessions, forcing MSSPs to rethink detection beyond static indicators.

Darktrace finds CikaBika, a Rust-based RAT delivered through document lures that uses Discord for commands, reconnaissance and data theft.

A former Air Force security officer says pilots moved mission data between classified systems and aircraft on commercial USB drives, a practice exposed by Agent.BTZ.

CenterPoint Energy says a breach exposed sensitive data tied to 1.06 million Texans, while the utility investigates and prepares customer notifications.

Hirudo Android malware replaces Indonesian banking apps with patched copies, steals credentials and enables remote access, screen viewing and SMS theft.

Citizen Lab links Discover-Tech ads to zero-click Candiru spyware attacks, exposing Al Jazeera devices and systemic risks across global ad networks.

Microsoft and Health-ISAC seized domains tied to Chinese-language phishing services blamed for more than 1 billion messages targeting 75,000 organizations.

XBOW says AI agents helped build a Windows Chrome exploit chain in six days, earning Google’s first $250,000 full-chain bounty under its 2026 rules.

Ransomware victims report threats against employees and families, including doxxing, stalking and abduction claims that remain difficult to independently verify.

OpenAI fired engineer Abdulrahman Alfozan after a covert recorder was found in an executive conference room; the FBI arrested him on Oct. 9.