Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

AI Security & Threats

OpenClaw AI Skills Weaponized to Mass‑Distribute Malware

OpenClaw AI Skills Weaponized to Mass‑Distribute Malware

Threat actors have begun publishing malicious OpenClaw AI “skills” that masquerade as legitimate voice‑assistant applications. VirusTotal analyses of dozens of newly submitted samples show the skills automatically retrieve additional payloads from remote servers and execute them on the host system, effectively turning a benign‑looking AI extension into a

Vulnerabilities & Exploits

New Android Lock‑Screen Bypass Lets Attackers Unlock Phones in Under a Minute

New Android Lock‑Screen Bypass Lets Attackers Unlock Phones in Under a Minute

Researchers have uncovered a timing flaw in the way recent Android versions process biometric authentication. By rapidly toggling the biometric prompt and measuring the response latency, an attacker can trick the system into accepting a false authentication token, effectively bypassing the lock screen in as little as 60 seconds without

Vulnerabilities & Exploits

Microsoft Authenticator Flaw Leaks TOTP Codes, Threatening MFA

Microsoft Authenticator Flaw Leaks TOTP Codes, Threatening MFA

Malwarebytes discovered that specific builds of the Microsoft Authenticator app unintentionally expose the generated time‑based one‑time passwords (TOTP) through a publicly readable storage location. Malicious software on the same device can harvest these codes, allowing it to replay the second factor in an MFA flow without user interaction.

Identity & Access Management

Default IoT Admin Passwords Keep Attackers Inside Your Network

Default IoT Admin Passwords Keep Attackers Inside Your Network

A recent SANS diary entry documented several incidents in which IoT devices—cameras, HVAC controllers, and smart sensors—were accessed using their factory‑default administrator accounts. Because these credentials were never changed, attackers slipped past perimeter defenses, logged in remotely, and used the devices as persistent footholds to tunnel back

Threat Intelligence

GreyNoise Intelligence Now Built Into CrowdStrike Falcon for Real‑Time Threat Context

GreyNoise Intelligence Now Built Into CrowdStrike Falcon for Real‑Time Threat Context

CrowdStrike has integrated GreyNoise’s IP reputation and activity feed directly into the Falcon platform. The partnership streams real‑time data about noisy, non‑targeted internet scanners and known malicious infrastructure, surfacing that context at the exact moment an endpoint or network sensor raises an alert. Defenders gain immediate visibility

AI‑driven attack automation meets integrated intel 🌐. Act now to fortify critical assets 🛡️.

Good morning, March 12 2026 – here’s the latest cyber and AI threat intelligence. Today's headlines * GreyNoise integrates with Google SecOps for instant malicious IP blocking. * GreyNoise now powers CrowdStrike Falcon threat intel. * Default admin credentials on IoT devices remain a high‑impact risk. * Microsoft Authenticator may leak

Security Culture & Human Factors

Hidden Risks: Proprietary Apps Create Security Blind Spots

A recent Security.StackExchange discussion highlighted how organizations that depend on proprietary software often operate without full visibility into the code base. Because the source is closed, internal security teams cannot perform thorough code reviews, and they must rely on the vendor’s own testing and disclosure practices. When a