Only 10% of SOCs say their AI tools actually deliver excellent value.
AI co-pilots jumped 145% and agents 118% last year — yet 71% see little or no real benefit (SOC-CMM 2026 report).
Why? Most are just bolting on separate tools that speed up old silos instead of connecting the full workflow.
Full story: https://t.co/2ApbCz5QIY
One crafted GitHub issue was enough.
In agent mode, Claude Code treated hidden instructions as trusted commands. It leaked OIDC workflow credentials that attackers could replay for repo write access.
The action bypassed checks on bot actors too.
Fixed in v1.0.94. Audit your workflows.
🚨 New #Android spyware Asin is targeting journalists and researchers in Arabic-speaking regions.
It spreads through fake websites impersonating government news, PDF editors, and war maps.
The apps hide #spyware behind useful features and were found on Android 15 devices.
Read: https://t.co/C21OgZ6ULJ
🚨 A SolarWinds Serv-U bug is now on CISA’s exploited list.
CVE-2026-28318 can let unauthenticated requests crash the file server.
Patch: Serv-U 15.5.4 HF1.
Federal agencies have until June 19, 2026.
Read: https://t.co/nx2Nz21Lp8
⚡ Your Smart TV might be scraping the web for 🤖 AI.
Not hacked. You tapped "accept" for fewer ads.
It said "occasionally." The fine print allows 200 GB a month.
Read ➝ https://t.co/obBYOkozcf
Your IP. Your bandwidth. Someone else's bot.
Dutch authorities have dismantled a botnet comprising at least 17 million infected devices, including computers, smartphones, tablets, and IoT devices.
More than 200 servers in the Netherlands supported the operation.
#ScamRecovery#scammed#recover#Help
🚨 Hackers breached 700+ Ghost CMS websites to serve ClickFix malware attacks.
Read 🠒 https://t.co/QjM60aS4Bt
The attackers exploited critical flaw CVE-2026-26980 to steal admin API keys and inject malicious JavaScript into legitimate sites, including university, AI, blockchain, and fintech platforms.
Visitors were shown fake CAPTCHA pages that tricked them into running malware.
#Cybersecurity #Malware
❗️ OpenAI is shipping a limited-edition collectible pen to its earliest ChatGPT Pro subscribers. Eligible users were notified around two months ago.
Supplies are capped at the first 4,000 who opt in through OpenAI's claim form.
Our team specializes in blockchain investigations, scam analysis, and digital asset recovery. If you've fallen victim to fraud, compromised wallets, or suspicious transactions, send us a DM to begin reclaiming control of your assets.
‼️ AI gooners be warned: the FBI and DOJ announced the arrests of Cornelius Shannon and Arturo Hernandez, both charged with violations of the TAKE IT DOWN Act, which prohibits nonconsensual publication of AI-generated deepfake pornography.
Shannon and Hernandez allegedly posted thousands of images and videos that appeared to depict real people nude and engaging in sexual acts. Victims included actresses, singers, elected officials, and private acquaintances of the defendants.
Shannon, 51, of New Jersey, ran 360 albums depicting ~90 female victims, viewed millions of times. Hernandez, 20, of Texas, posted 113 albums depicting ~50 victims, including non-public figures whose innocent photos were morphed into explicit content.
The DOJ is charging conduct from May 19, 2025 onward, the day President Trump signed the TAKE IT DOWN Act into law. Both men allegedly kept posting for a full year after that date, into the new federal statute.
Each defendant faces up to 2 years in federal prison.