Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Attackers Exploit AI Hallucinations to Send Users to Phishing Sites

Jul 22, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using a new technique called “phantom squatting” to trick AI tools into directing users to phishing sites, according to researchers at Palo Alto Networks’ Unit 42. Since AI models frequently hallucinate phony information, they sometimes point users to websites that don’t exist. Threat actors are now registering these AI-hallucinated domains and using them to host phishing sites.
Read Post
appsentinels

The Abbott Cyber Incident Reveals Why Infrastructure Security Is No Longer Enough for Healthcare

Jul 22, 2026 By AppSentinels In AppSentinels
Healthcare has spent years strengthening its infrastructure against ransomware, patching vulnerabilities, deploying endpoint detection, and implementing zero-trust architectures. Yet, attackers continue to find new ways to compromise healthcare organizations.
Read Post
CrowdStrike

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

Jul 21, 2026 By John Prieto In CrowdStrike
In February 2026, Socket.dev published research on a multi-stage npm supply chain worm operating under the internal flag SANDWORM_MODE. The campaign spanned 19 malicious packages in total across two unique publisher aliases and demonstrated a new class of supply chain attacks that targeted AI-augmented development workflows.
Read Post
cato networks

Cato CTRL Threat Brief: AsyncAPI Supply Chain Attack Delivers Miasma Malware Through Trusted npm Packages

Jul 20, 2026 By Dr. Guy Waizel In Cato Networks
On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined reach of approximately 2.9 million weekly downloads.
Read Post
appsentinels

The Agentic Attack Surface Is Growing Faster Than Your API Inventory

Jul 17, 2026 By AppSentinels In AppSentinels
Ask any security leader how many APIs their organization runs, and you’ll usually get a confident number. Ask them how many AI agents are operating in their environment right now, what those agents are deciding to do, and which APIs they’re calling to do it, and the confidence tends to disappear.
Read Post
bitsight

TeamPCP Profile: Why Developer Tools Are Becoming the Attack Path

Jul 16, 2026 By Emma Stevens In BitSight
TeamPCP is a financially motivated ransomware group tied to software supply chain compromise, credential theft, extortion, and abuse of developer infrastructure. The group is also tracked through aliases including ShellForce, PCPcat, TeamPCP, DeadCatx3, Altered Spider, and PersyPCP. The group has also claimed ownership of CipherForce, which it describes as its private locker.
Read Post
cato networks

The Agentic Attacker: One Objective, One Prompt, Forty Minutes, Domain Admin - Game Over

Jul 15, 2026 By Matan Mittelman In Cato Networks
In a controlled enterprise lab, we tested how far an agentic attack stack could go by harnessing a frontier model with an agent platform, MCP-enabled tooling, operational context, and enough autonomy to execute a complete attack path.
Read Post

Could your own AI agents run a ransomware attack?

Jul 14, 2026 By LimaCharlie In LimaCharlie
Ransomware is evolving well beyond locking systems, and agentic AI is introducing a category of security risk most organizations are not yet equipped to handle. On The Cybersecurity Defenders Podcast, Behnaz Karimi, Senior Cybersecurity Analyst at Accenture and independent ransomware researcher, walks through what that shift actually looks like. The full conversation includes.
View Video

AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]

Jul 14, 2026 By LimaCharlie In LimaCharlie
AI Chat with Maxime Lamothe-Brassard and Chris Luft. A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard. In this episode: Stories covered: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
View Video
outpost 24

JADEPUFFER: How an Agentic Ransomware Attack Unfolded

Jul 13, 2026 By Martin Jartelius In Outpost 24
In early July 2026, researchers at Sysdig published an analysis of what they assess to be the first documented case of agentic ransomware. The threat actor, which Sysdig calls JADEPUFFER, launched an extortion attack driven end to end by a large language model (LLM) rather than a conventional human-operated toolkit.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.