
Trezor Phishing Campaign Abused Trusted Email Infrastructure After Brevo Breach
Trezor phishing emails sent via breached Brevo targeted 347K users with fake STM32 flaw to steal wallet seeds. Learn how SAML failure enabled attack.

Trezor phishing emails sent via breached Brevo targeted 347K users with fake STM32 flaw to steal wallet seeds. Learn how SAML failure enabled attack.

Revolut disclosed customer KYC records after a fake government request passed email checks, exposing passports, selfies and transaction histories.

Attackers abuse Claude Artifacts and shared ChatGPT, Claude and Grok pages to host fake downloads and guides delivering SectopRAT, MacSync and AMOS.

GitLab CVE-2026-85706 allows unauthenticated file access via API. CISA added it to KEV with Sept 14 deadline. Learn affected versions and fixes.

Anthropic found AI automating cybercrime, surveillance, fraud and weapons Dec 2025-Aug 2026, turning phishing and stolen credentials into faster attacks.

Study finds 36,769 exposed AI endpoints online, including Ollama, Open WebUI and workflow platforms, risking GPU abuse and credential leaks.

Florida DMV breach used stolen Plant City police credentials from a personal device. ShinyHunters claimed access; scope of exposed driver data unknown.

Researchers allege OpenAI agents published 2,000+ RubyGems, exploited RubyDoc builds for RCE, and scraped public UK and SEC data. Attribution disputed.

Anthropic blocked Yemen accounts using Claude Code for missile design, guidance software, and failed rocket test analysis. No operational weapon built.