Related Threat Clusters
-
APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor
APT41, a China-backed threat group, has been identified using a new zero-detection ELF backdoor targeting Linux cloud workloads across major platforms including AWS, Google Cloud Platform, Microsoft Azure, and Alibaba…
6 articles · Updated April 13, 2026 -
Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google
The Glassworm botnet, which has targeted software developers since early 2025, was taken down in a coordinated operation by CrowdStrike, Google, and the Shadowserver Foundation on May 26, 2026. This botnet utilized…
30 articles · Updated May 27, 2026 -
Armored Likho Expands Cyber-Espionage with New Rust Toolkit
In May 2026, the Armored Likho group, also known as Eagle Werewolf, launched a cyber-espionage campaign targeting private individuals and organizations in Russia, including corporations, government bodies, and…
2 articles · Updated August 13, 2026 -
Critical Vulnerabilities in Claude for Chrome Expose User Data to Attackers
Two unpatched vulnerabilities in Anthropic's Claude for Chrome extension allow malicious browser extensions to access users' Gmail, Google Docs, and Calendar data. The flaws were reported by Manifold researchers in May…
8 articles · Updated July 15, 2026 -
CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities
Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses,…
10 articles · Updated August 18, 2026 -
Zenity Labs Reveals PleaseFix Vulnerabilities in Perplexity Comet and Other Browsers
Zenity Labs disclosed a family of critical vulnerabilities known as PleaseFix, affecting agentic browsers including Perplexity Comet. These vulnerabilities enable zero-click agent hijacking, local file exfiltration, and…
18 articles · Updated March 3, 2026 -
Threat Actors Exploit Calendar Subscriptions for Phishing and Malware Delivery
Threat actors are manipulating digital calendar subscription services to deliver phishing and malware content. This exploitation affects users of synced calendars, including platforms like Google Calendar and iCalendar,…
3 articles · Updated November 28, 2025 -
Google Patches GeminiJack Zero-Click Exploit in Gemini Enterprise
Google has addressed a zero-click vulnerability in Gemini Enterprise and Vertex AI, identified as 'GeminiJack.' Discovered by Noma Labs in June 2025, this exploit could have allowed attackers to steal sensitive…
4 articles · Updated December 10, 2025 -
Zero-Click RCE Vulnerability Discovered in Claude Desktop Extensions
A zero-click remote code execution (RCE) vulnerability has been identified in Claude Desktop Extensions, allowing attackers to compromise systems through a single Google Calendar event. This flaw affects over 10,000…
23 articles · Updated February 9, 2026 -
Surge in Calendar Phishing Attacks Targeting Google and Microsoft Users
Sublime Security has reported a significant increase in phishing attacks utilizing calendar invites, specifically targeting users of Google Workspace and Microsoft 365. These attacks exploit social engineering tactics…
2 articles · Updated November 11, 2025
Recent Intelligence Reports
- Copilot tricked into telling reseachers how to hack itself — Theregister · August 18, 2026
- Dead Drop Resolver — attack.mitre.org · August 14, 2026
- New bugs in Claude for Chrome allow extensions to abuse AI privileges — Csoonline · July 15, 2026
- Google and CrowdStrike dismantle botnet targeting open source developers — News.Laodong.Vn · May 28, 2026
- CrowdStrike and Google have blocked 'Glassworm,' a botnet targeting open — Gigazine · May 28, 2026
- Glassworm First Self Propagating Worm Using Invisible Code Hits Openvsx Marketplace — www.koi.ai · May 27, 2026
- CrowdStrike and Google dismantle Glassworm botnet that targeted developers and drained ... — Bitget · May 27, 2026
- Google, CrowdStrike and Shadowserver take down Glassworm botnet targeting developers — Newsbytesapp · May 27, 2026