Breaking News – Cyber Threats – 2026-07-31 13:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-07-31 13:00 PDT

• OpenAI says its new GPT 5.6 models are becoming more cost-efficient
  BleepingComputer • 2026-07-31 11:52 • www.bleepingcomputer.com
  OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna’s API price by 80% and Terra’s by 20% as it works to make its models more efficient. […]
  https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-new-gpt-56-models-are-becoming-more-cost-efficient/
• Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
  The Hacker News • 2026-07-31 11:52 • thehackernews.com
  A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025.

  These targeted organizations operate across several sectors, such as healthcare, research, government offices,
  https://thehackernews.com/2026/08/suspected-chinese-speaking-hackers.html

• Hacker uses DeepSeek AI to autonomously attack vulnerable servers
  BleepingComputer • 2026-07-31 10:35 • www.bleepingcomputer.com
  A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. […]
  https://www.bleepingcomputer.com/news/security/hacker-uses-deepseek-ai-to-autonomously-attack-vulnerable-servers/
• Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
  Schneier on Security • 2026-07-31 10:23 • www.schneier.com

  The chart is interesting.

  On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% at k=15) and Mythos 5 (2.6%), making it the most robust model evaluated. Opus 5 also outperformed all non-Claude models on this benchmark. The most robust non-Claude model was Muse Spark at 16.5% within 15…
  https://www.schneier.com/blog/archives/2026/07/anthropics-opus-5-is-better-at-resisting-prompt-injection.html

• CISA warns of cyberattacks disrupting U.S. water utilities
  BleepingComputer • 2026-07-31 09:49 • www.bleepingcomputer.com
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. […]
  https://www.bleepingcomputer.com/news/security/cisa-warns-of-cyberattacks-disrupting-us-water-utilities/
• HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
  The Hacker News • 2026-07-31 09:39 • thehackernews.com
  Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.

  According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that
  https://thehackernews.com/2026/07/hollowframe-loader-deploys-matryoshka.html

• Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
  The Hacker News • 2026-07-31 07:45 • thehackernews.com
  Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators.

  Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in 2019.

  The same apps have a second job. When a box
  https://thehackernews.com/2026/07/cheap-android-tv-boxes-pose-as-phones.html

• ESET tracks rise in malicious AI skills and adaptable malware
  BleepingComputer • 2026-07-31 07:01 • www.bleepingcomputer.com
  Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET’s new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security software. […]
  https://www.bleepingcomputer.com/news/security/eset-tracks-rise-in-malicious-ai-skills-and-adaptable-malware/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.