Ransomware Extortion Gets Personal as Attackers Target Employees’ Families
Nidhi Singal, CSO Magazine
Threat actors are applying pressure beyond the enterprise by doxing employees, targeting family members, and manipulating AI systems to force ransom payments.
Ransomware attackers are expanding their tactics beyond encrypting corporate systems and threatening to leak stolen data. They are increasingly using AI in attacks, exploiting organizations’ own AI systems and even using physical intimidation by threatening employees and their families to pressure companies into paying ransoms….
Read moreAI Has Changed Attack Speed, Not Security Fundamentals
Joshua Goldfarb, SecurityWeek
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
In recent months, Frontier AI and other tools have allowed attackers and defenders alike to shorten the time required to identify vulnerabilities and develop exploits for those vulnerabilities. With this has come an awful lot of hype and buzz around the topic of “virtual patching”…
Read more
Fake Calendly “Meta Careers” Pages Steal Facebook and Google Logins
Stefan Dasic, MalwareBytes
We found a wave of websites posing as Calendly booking pages for job interviews at Meta.
Visitors pick a slot for a 30-minute phone call with a recruiter, fill in their details, and pass what looks like a CAPTCHA. Then the page asks them to log in to Facebook. The interview is fake. The pages are designed to steal the visitor’s Facebook login details,…
Read moreFake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
The Hacker News
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts.
ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets. Similar attacks appearing across different customers can trigger repetitive investigations, consume analyst capacity, and extend response times,…
Read more