Breaking News – Cyber Threats – 2026-07-31 08:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-07-31 08:00 PDT

• ESET tracks rise in malicious AI skills and adaptable malware
  BleepingComputer • 2026-07-31 07:01 • www.bleepingcomputer.com
  Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET’s new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security software. […]
  https://www.bleepingcomputer.com/news/security/eset-tracks-rise-in-malicious-ai-skills-and-adaptable-malware/
• Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
  The Hacker News • 2026-07-31 05:51 • thehackernews.com
  Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined.

  Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out of which 349 were reported by Google itself. Seven of the
  https://thehackernews.com/2026/07/three-recent-chrome-releases-fix-1442.html

• Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
  The Hacker News • 2026-07-31 04:55 • thehackernews.com
  An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user’s network session.

  The findings have been released by a group of researchers from Singapore’s Nanyang Technological University
  https://thehackernews.com/2026/07/researchers-report-84-flaws-in-4g-and.html

• The $5 million threat: AI Is supercharging phishing attacks
  Graham Cluley • 2026-07-31 04:43 • www.fortra.com
  According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence.

  Read more in my article on the Fortra blog.
  https://www.fortra.com/blog/5-million-threat-ai-supercharging-phishing-attacks

• 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
  The Hacker News • 2026-07-31 04:24 • thehackernews.com
  Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique to an industrial-scale threat in under six months.

  Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide range of apps and use-cases that it wasn’t originally
  https://thehackernews.com/2026/07/6-reasons-why-device-code-phishing-is.html

• Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
  The Hacker News • 2026-07-31 04:21 • thehackernews.com
  Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously.

  After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session.

  The operator, tracked through the aliases knaithe and KnYuan,
  https://thehackernews.com/2026/07/chinese-hacker-commands-deepseek-via.html

• Facial Recognition at Madison Square Garden
  Schneier on Security • 2026-07-31 04:08 • www.schneier.com

  Last month, the story broke (alternate link) that Madison Square Garden uses facial recognition software on everyone entering the facility, and—among other groups—flags activists that oppose using facial recognition.

  Turns out that the system was shut off for Taylor Swift’s wedding.

  <...
  https://www.schneier.com/blog/archives/2026/07/facial-recognition-at-madison-square-garden.html

• Network Anomaly Detection in KATA
  Securelist • 2026-07-31 03:00 • securelist.com
  An analysis of how Network Anomaly Detection (NAD) rules work within Kaspersky Anti Targeted Attack, using Kerberoasting and DNS tunneling attacks as examples.
  https://securelist.com/tr/network-anomaly-detection-in-kata/120892/
• zipdump.py: Metadata Encoding, (Fri, Jul 31st)
  SANS ISC Diary (full) • 2026-07-31 02:22 • isc.sans.edu

  I was asked for help with a problem similar to the following.

  
  https://isc.sans.edu/diary/rss/33202

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.