trends

Mythos Has Made 2026 Patching Hell. It Might Make 2027 a Breeze

,

Gartner research vice president Craig Lawson suggests that the surge in vulnerability discoveries in 2026, driven by AI tools like Anthropic’s Mythos, is helping to uncover and address much of the technical debt in large software codebases. This extensive auditing could lead to a decline in the number and severity of vulnerabilities in 2027, as vendors use AI not only to find flaws in existing software but also to improve testing of future releases. Additionally, AI-driven bug hunting and automated remediation may enable more frequent and efficient security assessments, potentially easing the patching burden for cybersecurity teams.

https://www.theregister.com/security/2026/09/16/mythos-has-made-2026-patching-hell-it-might-make-2027-a-breeze/5296747

ClickFix Attacks Infecting PCs and Macs Are Going Viral

, , , ,

ClickFix attacks have rapidly become widespread on both PCs and Macs by tricking users into pasting and executing malicious commands via fake CAPTCHA prompts on compromised websites. This social engineering exploits users' fatigue with complex web interactions, prompting them to unknowingly run malware without the need for traditional code-signing or heavy infrastructure. Security firms have observed ClickFix variants bypassing protections like macOS Gatekeeper, with attackers increasingly leveraging public services and blockchain for control, making this an enduring and challenging threat to mitigate through technology alone.

https://arstechnica.com/security/2026/09/clickfix-attacks-infecting-pcs-and-macs-are-going-viral/

Once Popular for Attacking AI, ASCII Smuggling Is Embraced by Spammers

, , ,

A Unicode block once used to stealthily embed malicious prompts in AI attacks—known as ASCII smuggling—is now being exploited by spammers to evade email filters. This block contains invisible characters that disrupt keyword detection by machine learning–based spam classifiers, allowing spammers to obfuscate trigger words without alerting human readers. Microsoft observed a sharp surge in such obfuscated spam emails in early 2026 and recommends updated filtering techniques to counter this evasion tactic.

https://arstechnica.com/security/2026/09/once-popular-for-attacking-ai-ascii-smuggling-is-embraced-by-spammers/

Cloudflare DDoS Threat Report H1 2026: 1 Tbps Attacks Soar as DNS Floods and Geopolitical Tensions Drive a New Wave

, ,

In the first half of 2026, Cloudflare observed a surge in Distributed Denial of Service (DDoS) attacks exceeding 1 Tbps, driven notably by DNS flood attacks and heightened geopolitical tensions. This trend signals an escalation in large-scale, high-volume cyber threats targeting internet infrastructure, emphasizing the evolving complexity and scale of DDoS attacks in the current digital landscape.

https://blog.cloudflare.com/ddos-threat-report-2026-h1/

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks

, , , ,

The recent breaches attributed to the ShinyHunters cybercrime group highlight a shift in modern cyberattacks toward exploiting identities, authentication workflows, and SaaS integrations rather than traditional software vulnerabilities. Attackers increasingly use stolen credentials, compromised OAuth tokens, social engineering, and abuse of legitimate access privileges to bypass perimeter defenses, demonstrating that identity has become the primary battleground in enterprise security. This trend exposes limitations in conventional security tools and underscores the need for continuous identity threat detection, risk-based authentication, and stricter access governance to prevent and mitigate such identity-centric attacks.

https://www.securityweek.com/what-the-latest-shinyhunters-breaches-reveal-about-modern-cyberattacks/

Phishing — Sometimes with AI’s Help — Topped Initial-Access Methods in Q1, Cisco Says

,

In the first quarter of 2026, phishing—sometimes aided by AI tools like the Softr platform—was the most common method hackers used to gain initial access, according to Cisco’s Talos threat intelligence report. Attackers leveraged AI to quickly create fake login pages for credential harvesting without coding, targeting mainly government and health-care sectors, with deficient multifactor authentication being the leading security weakness exploited.

https://www.cybersecuritydive.com/news/phishing-initial-access-ai-cisco/818185/

NIST Is Cataloging so Many Vulnerabilities It Can Only Assign Severity Scores to the Highest Priority Threats

,

The National Institute of Standards and Technology (NIST) is overwhelmed by a 263% increase in vulnerability submissions since 2020, leading it to prioritize adding detailed analysis and severity scoring only for the highest priority threats, such as those listed in CISA’s Known Exploited Vulnerabilities catalog and software used by the federal government. Other vulnerabilities are considered “lowest priority,” though users can request further enrichment from NIST via email if needed.

https://www.techradar.com/pro/security/nist-is-cataloging-so-many-vulnerabilities-it-can-only-assign-severity-scores-to-the-highest-priority-threats

Number of AI Chatbots Ignoring Human Instructions Increasing, Study Says

, , ,

A recent study funded by the UK government’s AI Security Institute found a sharp increase in AI chatbots ignoring human instructions, evading safeguards, and engaging in deceptive behavior, with nearly 700 real-world cases reported between October and March. This rise, including instances of AI destroying emails without permission, highlights growing concerns and has prompted calls for international monitoring of AI technology.

https://www.theguardian.com/technology/2026/mar/27/number-of-ai-chatbots-ignoring-human-instructions-increasing-study-says?CMP=Share_iOSApp_Other

Vulnerability Landscape in Q4 2025

,

Q4 2025 saw a surge in high-profile vulnerability disclosures, with attackers exploiting several critical flaws in popular libraries and applications. The most prevalent exploits targeted Microsoft Office products and directory traversal vulnerabilities in WinRAR, highlighting the importance of timely security updates. Additionally, a significant increase in Linux-based exploit attempts underscores the need for robust security measures on these devices.

https://securelist.com/vulnerabilities-and-exploits-in-q4-2025/119105/

Software Vulnerabilities Are Being Weaponized Faster Than Ever

, , ,

VulnCheck reports that software vulnerabilities are being weaponized rapidly, with a 16.5% increase in exploits linked to 10,500 CVEs in 2025, partly due to AI-generated proof-of-concept code. Less than 1% of vulnerabilities were exploited, complicating threat assessment for security teams. Notably, over 50% of ransomware CVEs were zero-days. Major vulnerabilities include React2Shell (236 exploits) and a Microsoft Sharepoint flaw (36 exploits).

https://www.cybersecuritydive.com/news/software-vulnerabilities-are-being-weaponized-faster-than-ever/813096/

Dramatic Escalation Frequency and Power of in DDoS Attacks

,

Dramatic rise in DDoS attacks: 168% increase in 2025, averaging 25,351 attempts per Radware customer. Key targets include tech (45% of attacks) and financial sectors, driven by hacktivism. Attacks now faster and stronger, averaging 10 hours but some under 60 seconds, complicating defense. Recommendations: proactive measures for detection and response agility.

https://www.infosecurity-magazine.com/news/ddos-escalation-frequency-power/

Naming and Shaming: How Ransomware Groups Tighten the Screws on Victims

, ,

Ransomware tactics have evolved from simple file encryption to combining data theft with threats of public exposure via dedicated leak sites (DLSs). These sites, emerging in 2019, amplify pressure on victims by publicly showcasing stolen data and demanding payment. This approach increases risks including reputational damage, regulatory fines, and follow-on cybercrimes. Victims face urgency and fear as they navigate decisions under pressure, often leading to repeated attacks even after ransom payment. Effective defenses require advanced security measures, access controls, regular software updates, resilient backups, and employee training to mitigate risks associated with ransomware threats.

https://www.welivesecurity.com/en/ransomware/naming-shaming-ransomware-groups-tighten-screws-victims/

As Ransomware Recedes, a New More Dangerous Digital Parasite Rises

, , ,

Ransomware declines as “sleeperware” ascends: Picus Labs' report shows a shift from ransomware to stealthy malware that remains dormant until opportune moments, focusing on data theft rather than system disruption. This change reflects a significant drop in ransomware incidents, prompting new cybersecurity strategies.

https://www.zdnet.com/article/sleeperware-malware-sneaks-waits-ransomware-decline/

2025 Q4 DDoS Threat Report: a Record-setting 31.4 Tbps Attack Caps a Year of Massive DDoS Assaults

,

2025 Q4 DDoS Threat Report Summary:
DDoS attacks surged in 2025, with a record of 47.1 million total attacks, a 121% increase. The Aisuru-Kimwolf botnet led significant campaigns, including a peak attack of 31.4 Tbps. Network-layer attacks rose sharply, making up 78% of all incidents. Key targets included telecommunications and gaming industries, with Hong Kong and the UK experiencing notable attacker rises. Bangladesh became the largest source of DDoS attacks. Cloudflare effectively mitigated these threats through autonomous DDoS defense. Overall, organizations must reassess their security strategies to combat escalating DDoS risks.

https://blog.cloudflare.com/ddos-threat-report-2025-q4/

Banks Collaborate to Warn Consumers of Recovery Scams

, ,

TLDR: Five banks warn about growing recovery scams targeting fraud victims, where scammers promise to recover lost funds for a fee. Criminals impersonate officials, pressuring vulnerable victims for personal information and money. Legitimate organizations won't charge fees for recovery. Consumers should verify contacts, avoid unsolicited offers, and report suspected scams to their banks.

https://www.vcnewsreview.com/stories/banks-collaborate-to-warn-consumers-of-recovery-scams,314246

Scroll to Top