For providers

The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.

Ping Identity adds self-managed identity controls to secure and govern AI agents in regulated environments.

The campaign includes direct threats and harassment via social media, doxing, drone activity near Navy assets, ground-level surveillance, physical attacks, and probes of security measures.

The latest Agent Tesla campaign utilizes a JScript dropper that incorporates Unicode emoji characters to disrupt signature-based detection and obscure the malicious code.

Project Griffin, also known as the Intelligent Response and Orchestration Node (IRON), is a pilot program designed to create an ecosystem of AI agents capable of analyzing data from the Army's extensive network sensors and autonomously executing defensive actions.

Check Point Research disclosed a technique that uses Microsoft Defender's boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level file and registry operations on Windows 7 through Windows 11 25H2.

Wyden has formally requested the U.S. Government Accountability Office (GAO) to conduct a comprehensive inquiry into how agencies such as the FBI, DEA, ICE Homeland Security Investigations, and the Secret Service utilize these sophisticated surveillance technologies.

Kaspersky discovered the threat in June 2026, noting that the malware spreads through the built-in updaters of the head unit firmware.

The attack chain begins with a ZIP archive, likely distributed via phishing, which initiates an LNK-based infection.