• Threat actors are posing as AI crawlers to hunt for exposed credentials
• Attackers plant remote access tools on compromised PaperCut servers
• AWS Console Private Access can block sign-ins to personal accounts
• ShinyHunters claims it stole 284 million patient records from McKesson
• Anthropic locks out Claude users after infostealers hijack login sessions
• Debian developers rejected an LLM ban and left disclosure voluntary
• The OpenClaw 2.0 release moves your sessions into SQLite
• What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree
• Halo-record: Open-source audit trails for AI agents
• Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign
• Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn
• Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
• Manchester Airports Group Hit by Cyber Incident
• Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns
• CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
• Boston Scientific Reveals Global Disruption After Cyber Incident
• OpenAI: Hugging Face Incident a “Warning Shot” to the World
• Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel
• Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects
• Four in Five AI Tools Run with No IT Oversight, New Research Finds
• Average Cyber Insurance Losses Increase Despite Fewer Claims
• Linux Foundation Introduces TRACE Standard for AI Runtime Evidence
• DDoS Attack Hits Norwegian Government Services
• ZeroTokens Phishing Platform Steers Attacks in Real Time

Attackers are disguising automated scanning as traffic from AI crawlers operated by OpenAI, Anthropic, Google, Perplexity and other companies while searching websites for exposed credentials and configuration files, according to GreyNoise. (Source: GreyNoise) “Every program that visits a website announces itself in one line of the request. Chrome says it is Chrome. Googlebot says it is Googlebot. Anthropic’s crawler says it is ClaudeBot. Nothing in the request itself proves any of it is true,” researchers …