Tag: control
-
Hackers Abuse ScreenConnect Remote Access Tool to Deploy AsyncRAT Through Fake Installers
A wide-reaching campaign in which attackers abused the legitimate remote administration tool ScreenConnect to deploy AsyncRAT via faux software installers. The infection chain leverages trusted binaries, DLL sideloading, reflective loading and process hollowing to achieve stealthy persistence and remote control an approach that capitalizes on the very trust enterprises place in remote management tools. The…
-
Cloudflare changes AI crawler access rules
Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training. The feature is available to all Cloudflare … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/02/cloudflare-ai-crawler-controls/
-
Hackers Use Geofenced Webpages to Deliver Ousaban Banking Trojan in Spain and Portugal
A targeted phishing campaign delivering the Ousaban banking Trojan to users in Spain and Portugal, notable for its use of geofenced webpages, layered evasion techniques, and a modular delivery chain. The threat actor repurposes a playbook seen previously in Brazil but has refined access controls and server-side checks to ensure malware reaches only the intended…
-
The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative
AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy. First seen on hackread.com Jump to article: hackread.com/non-compliance-ai-governance-enterprise-imperative/
-
Azure Password-Spraying Attack Bypasses MFA Defenses
Threat Actor Uses Deprecated OAuth 2.0 Authentication Flow. Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth 2.0 to generate access tokens, in some cases sidestepping multifactor authentication controls, warn researchers. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/azure-password-spraying-attack-bypasses-mfa-defenses-a-32128
-
US lifting export control restrictions on Anthropic’s Mythos, Fable
The company and the Commerce Department say they have reached an agreement that will see the AI models released publicly with new guardrails and classifiers. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-lifting-export-control-restrictions-anthropic-mythos-fable/
-
US lifts export controls on Anthropic’s frontier cybersecurity AI models
Anthropic said export controls on certain models had been lifted after the company came to a series of agreements with the government. First seen on therecord.media Jump to article: therecord.media/us-lifts-export-controls-anthropic-cyber-models
-
U.S. lifting export control restrictions on Anthropic’s Mythos, Fable
The company and the Commerce Department say they have reached an agreement that will see the AI models released publicly with new guardrails and classifiers. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-lifting-export-control-restrictions-anthropic-mythos-fable/
-
Anthropic’s Fable 5 and Mythos 5 Are Back with New Security Guardrails
Tags: controlThe new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/anthropic-fable-mythos-back/
-
RedLine Infostealer Thread Reveals Hidden Maritime Phishing and BEC Infrastructure
A routine threat-feed alert for a RedLine Stealer command-and-control (C2) IP morphed into a full-scale pivot investigation that exposed a tailored maritime spear”‘phishing and business email compromise (BEC) ecosystem. The starting signal a UniqueSignal entry from VMRay identified 194[.]156.79.122:55615 as a RedLine-associated host. That solitary indicator, combined with targeted forensic pivots across VirusTotal, FOFA, Censys…
-
Glitch SPY RAT Abuses Android Accessibility Service for Full Device Control
An emerging Android remote-access trojan platform, tracked as Glitch SPY, that leverages a fraudulent Polish apartment-rental website to trick victims into sideloading a malicious APK. The dropper, identified as the Brokewell Android Loader, presents a plausible rental-app experience while secretly installing Glitch SPY and coercing users to enable Android Accessibility Service an abuse that gives…
-
Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Tags: controlAnthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier.Fable 5 returns to users on Wednesday, July 1, across Claude.ai, the Claude Platform, Claude Code,…
-
US Lifts Export Curbs on Anthropic AI Models
Commerce Ends 18-Day Ban to Restore Global Access to Fable 5, Mythos 5. The U.S. Department of Commerce lifted export controls on Anthropic’s Fable 5 and Mythos 5, ending an 18-day restriction imposed over national security concerns. The reversal restores global access. It is unclear whether the government will use similar controls on future AI…
-
U.S. Commerce Withdraws Export Controls on Anthropic Claude Models After Security Commitments
The U.S. Department of Commerce has recently lifted export controls on Anthropic’s advanced AI models, Claude Fable 5 and Mythos 5, following a series of security and compliance commitments made by the company. This decision represents a significant shift in the regulatory landscape surrounding frontier artificial intelligence systems, particularly those that could be used for…
-
Microsoft wants to stop unwanted bots from entering Teams meetings
A new Microsoft Teams admin policy, Manage external bots and their access to meetings, gives organizations greater visibility and control over external bots in meetings. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/01/microsoft-teams-bot-detection-and-protection/
-
Anthropic to restore Claude Fable access on Wednesday
Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude’s two most powerful models, Fable 5 and Mythos 5. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/anthropic-to-restore-claude-fable-access-on-wednesday/
-
Malicious PyPI packages give hackers control of Telegram bot servers
A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-pypi-packages-give-hackers-control-of-telegram-bot-servers/
-
Austria Urges Anthropic to Move to EU to Avoid US Controls
Mythos and Fable Export Controls Deprive EU of ‘Cutting-Edge Innovation,’ Security. Stung by the Trump administration’s export controls on Anthropic’s most powerful cyber-capable models, Mythos and Fable, the Austrian government wants Europe to tempt Anthropic into moving across the Atlantic. Austria told the EU sovereignty leader that we must act now. First seen on govinfosecurity.com…
-
Cloudflare und beehiiv integrieren AI Crawl Control für unabhängige Publisher
AI Crawl Control wird laut Ankündigung in der Beta-Phase allen beehiiv-Nutzern Einblick geben, wie KI-Dienste mit ihren Inhalten interagieren und welchen Traffic sie erzeugen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-und-beehiiv-integrieren-ai-crawl-control-fuer-unabhaengige-publisher/a45631/
-
Millenium RAT Uses Base64 and XOR Configuration to Hide Telegram C2 Settings
Millenium RAT version 4.* exposes a compact but potent evolution: the malware has migrated from .NET to native C++, while retaining a stealthy Telegram-based command-and-control (C2) model that requires no bespoke server infrastructure. The sample set and telemetry analyzed by Group-IB show the RAT embeds its entire configuration inside an RCDATA resource, masks that configuration…
-
China’s Zhipu AI Model GLM-5.2 Detects Software Vulnerabilities Like Claude Mythos
Zhipu AI’s newly released GLM-5.2 model is attracting significant attention from the cybersecurity community due to its vulnerability detection capabilities, which are comparable to those of Anthropic’s restricted Claude Mythos system. This development raises new concerns about the effectiveness of U.S. export control policies on advanced artificial intelligence. Released on June 13, 2026, under a…
-
Critical Linux Kernel Flaw Allows Unprivileged Users to Gain Full Root Access
A newly disclosed flaw in the Linux kernel’s traffic-control subsystem, now assigned CVE-2026-46331 and referred to as >>Pedit COW,<< has been found to grant any unprivileged local user full root access on vulnerable systems. Within just 24 hours of the CVE being formally assigned on June 16, 2026, a working proof-of-concept exploit dubbed packet_edit_meme surfaced…
-
Post-Quantum Security Spurs National Sovereignty Thinking
AI Export Controls Expose Hidden Risks to Post-Quantum Cryptography Migrations. Security leaders warn that post-quantum cryptography migration is creating new dependencies on foreign vendors, hyperscalers and supply chains, raising questions about resilience, crypto-agility and national control over critical security infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/post-quantum-security-spurs-national-sovereignty-thinking-a-32095
-
Post-Quantum Security Spurs National Sovereignty Thinking
AI Export Controls Expose Hidden Risks to Post-Quantum Cryptography Migrations. Security leaders warn that post-quantum cryptography migration is creating new dependencies on foreign vendors, hyperscalers and supply chains, raising questions about resilience, crypto-agility and national control over critical security infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/post-quantum-security-spurs-national-sovereignty-thinking-a-32095
-
Post-Quantum Security Spurs National Sovereignty Thinking
AI Export Controls Expose Hidden Risks to Post-Quantum Cryptography Migrations. Security leaders warn that post-quantum cryptography migration is creating new dependencies on foreign vendors, hyperscalers and supply chains, raising questions about resilience, crypto-agility and national control over critical security infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/post-quantum-security-spurs-national-sovereignty-thinking-a-32095
-
OpenAI Limits GPT-5.6 Rollout at US Government’s Request
Enterprise Users Face Delayed Access as Trusted Partners Get Early Preview. OpenAI limited its release of GPT-5.6 to a short list of users after the Trump administration requested access to the model and the list of users. The staggered rollout came weeks after the government exerted emergency export controls over Anthropic’s Fable 5 model. First…
-
Weak Access Controls Leave Enterprise Networks at Risk
Barracuda researchers found that weak credentials and exposed remote services continue to fuel malware, botnet, and credential attacks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/weak-access-controls-leave-enterprise-networks-at-risk/
-
Weak Access Controls Leave Enterprise Networks at Risk
Barracuda researchers found that weak credentials and exposed remote services continue to fuel malware, botnet, and credential attacks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/weak-access-controls-leave-enterprise-networks-at-risk/
-
Cisco Adds NHI to Security Stack With Astrix, WideField Acquisitions
Cisco joins a growing list of security platform providers who are betting that securing the agentic workforce means turning identity into the primary control plane. First seen on darkreading.com Jump to article: www.darkreading.com/identity-access-management-security/cisco-adds-nhi-security-stack-with-astrix-widefield
-
Your First GRC Agent: A Red Teamer’s Walkthrough
AI won’t replace GRC analysts, but it can eliminate much of the repetitive work they do. Anecdotes walks through building an agent that continuously monitors controls, identifies evidence gaps, and opens remediation tasks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/your-first-grc-agent-a-red-teamers-walkthrough/