Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

AI Security & Threats

Autonomous Attack Bots Learn to Exploit New Bugs Without Human Help

Researchers at a leading university published a paper on arXiv showing that autonomous cyber‑attack agents can generalize learned behaviors to unseen vulnerabilities. By combining reinforcement learning with meta‑learning techniques, the agents develop a “conceptual map” of exploit patterns, allowing them to craft payloads for novel software flaws without

AI Security & Threats

OpenClaw AI Powers Adaptive Reverse Shells and Cognitive Rootkits

OpenClaw AI Powers Adaptive Reverse Shells and Cognitive Rootkits

Researchers have confirmed that threat actors are weaponizing the OpenClaw AI framework to auto‑generate reverse shells and rootkits that rewrite their own code on the fly. The AI model analyzes the victim environment, selects evasion techniques, and produces payloads that can morph to avoid signature‑based detection, effectively turning

AI Security & Threats

OpenClaw AI Skills Hijacked for Covert Malware Delivery

OpenClaw AI Skills Hijacked for Covert Malware Delivery

Threat actors have begun abusing the OpenClaw AI automation platform by publishing deceptive “skills” that appear legitimate but are programmed to silently retrieve and execute malicious payloads on compromised hosts. VirusTotal’s recent scans flagged several of these skills, revealing that they embed hidden network calls to malicious repositories and

Vulnerabilities & Exploits

New Android Lock‑Screen Bypass Exploits Biometric Pathway, Gives Full Device Access

New Android Lock‑Screen Bypass Exploits Biometric Pathway, Gives Full Device Access

A recently disclosed Android flaw lets an attacker sidestep the lock screen by corrupting the biometric authentication flow. By injecting crafted data into the fingerprint/face‑unlock subsystem, the exploit can unlock the device without any user interaction, effectively granting the attacker the same privileges as the legitimate owner. The

Vulnerabilities & Exploits

Microsoft Authenticator Leak Lets Apps Sniff One‑Time Codes

Microsoft Authenticator Leak Lets Apps Sniff One‑Time Codes

Security researchers found that specific builds of Microsoft Authenticator unintentionally broadcast the generated one‑time password (OTP) to any app with permission to read the device’s clipboard or accessibility data. The flaw allowed unrelated applications on the same device to capture the six‑digit code before the user could

Identity & Access Management

Default IoT Admin Accounts: Silent Doorways for Immediate Compromise

Default IoT Admin Accounts: Silent Doorways for Immediate Compromise

IoT devices are shipped with factory‑set administrative usernames and passwords that are rarely changed during rollout. Attackers scanning a network can quickly locate these devices, use known default credentials, and obtain full privileged access within minutes of deployment. Because the traffic originates from legitimate‑looking internal IPs, conventional perimeter