Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
HalluSquatting is an attack where researchers pre-compute fake repository, package, or skill names that AI coding agents predictably invent, register those names first, and load them with malicious instructions.
Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
Threat actors are using email addresses exposed in ShinyHunters data breaches to send sextortion emails demanding $2,000 in Bitcoin.
The traditional model of finding and patching vulnerabilities is no longer effective, prompting a shift towards risk-based disclosure and prioritization.
Steam forum users are being targeted by ClickFix attacks that pretend to offer fixes for game issues but actually infect devices with XMRig cryptominers.
A 26-year-old Illinois man was sentenced to 76 months in prison for hacking into over 750 women's Snapchat accounts to steal nude photos.
Russian state-aligned hackers have been compromising organizations through zero-click phishing emails targeting Zimbra Collaboration Suite's webmail platform, exploiting a patched vulnerability from November 2025.
UK Prime Minister Andy Burnham reappoints cybersecurity minister Liz Lloyd despite abolishing the department that oversaw cyber policy, ensuring continuity in UK cyber policy.
A threat actor used the open-source Hermes AI agent to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance, with session files and evidence of access to internal systems indicating multiple compromised systems.