Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Strategic Exposure to Emerging Threats & AI‑Driven Attack Vectors Demands Immediate Control

Strategic Exposure to Emerging Threats & AI‑Driven Attack Vectors Demands Immediate Control

March 12, 2026 – Hello security leaders, here’s the latest risk intelligence. Today's headlines * GreyNoise integration streamlines Google SecOps alert triage. * New GreyNoise feed enriches CrowdStrike Falcon investigations. * IoT devices exposing default admin credentials threaten critical infrastructure. * Microsoft Authenticator code leak undermines multi‑factor authentication. * OpenClaw AI skills

Threat Intelligence

Gemini‑Powered Groundsource Turns News Into Real‑Time Threat Intel

Gemini‑Powered Groundsource Turns News Into Real‑Time Threat Intel

Google Research launched Groundsource, a new service built on the Gemini large‑language model that automatically parses news articles into structured, machine‑readable data. By extracting key facts, locations, dates, and entities, the platform can quickly synthesize hazard information for disaster response, risk analysis, and situational awareness across multiple domains.

Threat Intelligence

Spike in SSH Scans Signals Imminent Credential‑Theft Campaigns

Spike in SSH Scans Signals Imminent Credential‑Theft Campaigns

The Internet Storm Center’s daily report shows a sharp increase in SSH scanning traffic over the past 48 hours, with observed connection attempts up ≈ 250 % compared to the baseline. The scans are originating from a dispersed set of IP ranges and target port 22 on both public‑facing and

AI Security & Threats

AI Attack Bots Learn to Replicate Exploits Across Networks Without Human Guidance

A team of security researchers released a paper showing that autonomous cyber‑attack agents can abstract the techniques they learn in one environment and apply them to completely different targets. By training on a limited set of exploits, the AI‑driven bots develop a generalized playbook that lets them discover

AI Security & Threats

OpenClaw Evolves: Reverse Shells, Semantic Worms, and AI‑Built Rootkits

OpenClaw Evolves: Reverse Shells, Semantic Worms, and AI‑Built Rootkits

Threat actors have taken the open‑source OpenClaw framework and added a suite of advanced capabilities. New modules embed reverse shells that automatically call home over encrypted channels, while “semantic worms” analyze code structure to spread only to compatible services. The most alarming development is the use of large language

AI Security & Threats

OpenClaw AI Agents Hijacked to Push Malware via Malicious Skills

OpenClaw AI Agents Hijacked to Push Malware via Malicious Skills

Threat actors have begun weaponizing OpenClaw’s AI agents by publishing counterfeit “skills” that direct victims to download and execute code from untrusted URLs. VirusTotal’s recent scans flagged several of these skill packages as containing dropper payloads, turning the AI platform into an unwitting malware distribution channel. The malicious

Vulnerabilities & Exploits

New Android Timing Flaw Lets Attackers Unlock Phones in Under 60 Seconds

New Android Timing Flaw Lets Attackers Unlock Phones in Under 60 Seconds

A recently disclosed Android vulnerability exploits a timing mismatch in the lock‑screen authentication module. By sending specially crafted authentication requests and measuring the response latency, an attacker can determine the correct unlock sequence and bypass PIN, pattern, or biometric locks in less than a minute. The flaw resides in

Identity & Access Management

Microsoft Authenticator stores OTPs insecurely, risking MFA token theft

Microsoft Authenticator stores OTPs insecurely, risking MFA token theft

Researchers found that specific releases of the Microsoft Authenticator app write generated one‑time passwords to an unprotected location on the device. The codes remain accessible until they expire, giving anyone with local access—or a compromised app sandbox—a window to steal the MFA token before it is used.