Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Strategic Threat Landscape Reveals AI‑Accelerated Attacks, Integration Gains, and Critical Zero‑Day Gaps

Good morning, March 8 2026 – here are the top cyber and AI threats you need to act on. Today's headlines * GreyNoise data now powers CrowdStrike Falcon for real‑time malicious‑IP blocking. * OpenAI’s Codex Security flags over 10,000 high‑severity code flaws in 1.2 M

Malware & Ransomware

Fake Google Meet Update Delivers Full‑Control RAT to Enterprises

Fake Google Meet Update Delivers Full‑Control RAT to Enterprises

A phishing campaign is distributing a counterfeit Google Meet “update” dialog that mimics the legitimate UI. When a user clicks “Update,” a malicious installer drops a remote‑access trojan (RAT) onto the system, granting the attacker full administrative control of the PC. The payload can capture credentials, move laterally across

Threat Intelligence

APT TA423 Weaponizes Australian News Sites to Drop ScanBox Keylogger

APT TA423 Weaponizes Australian News Sites to Drop ScanBox Keylogger

A newly identified watering‑hole operation linked to APT group TA423 is compromising popular Australian news websites. The attackers have injected malicious JavaScript that serves the ScanBox keylogger to any visitor originating from the energy and government sectors in the South China Sea region. When a target loads the compromised

Threat Intelligence

Iranian Threat Actors Ramp Up IP‑Camera Hijacks to Fuel Kinetic Operations

Iranian Threat Actors Ramp Up IP‑Camera Hijacks to Fuel Kinetic Operations

Checkpoint researchers have identified a coordinated surge in compromise of internet‑connected video cameras throughout the Middle East. The actors, linked to Iranian state‑aligned groups, are exploiting default credentials, outdated firmware, and unsecured network segments to gain persistent access to live feeds. The stolen footage is then repurposed to

AI Security & Threats

AI Agents Turbocharge North Korean Attack Infrastructure

AI Agents Turbocharge North Korean Attack Infrastructure

Recent intelligence reports confirm that state‑aligned threat groups, notably North Korea’s cyber units, have begun integrating autonomous AI agents into their operational pipelines. These agents handle the provisioning, configuration, and continuous maintenance of malicious infrastructure—tasks that formerly required hands‑on effort from human operators. By scripting the

Malware & Ransomware

LummaStealer Returns with CastleLoader, Mimics Legit User Activity to Slip Past Defenses

LummaStealer Returns with CastleLoader, Mimics Legit User Activity to Slip Past Defenses

The LummaStealer infostealer has resurfaced, now bundled with the CastleLoader dropper. This refreshed version adopts user‑like patterns—such as launching from familiar directories, using standard Windows APIs, and timing its network calls to match typical user activity—making it blend in with legitimate processes and evade many behavioral detection

Vulnerabilities & Exploits

AI Model Spots 22 Firefox Flaws, 14 Critical – Patch Fast in v148

AI Model Spots 22 Firefox Flaws, 14 Critical – Patch Fast in v148

Anthropic leveraged its Claude Opus 4.6 large language model to conduct an automated security audit of Mozilla’s Firefox browser. The AI scan uncovered 22 previously unknown vulnerabilities, including 14 classified as high severity. Mozilla responded quickly, issuing a comprehensive fix in the Firefox 148 release. These flaws ranged