US intelligence agencies have warned that Chinese AI firms are conducting large-scale distillation attacks to extract reasoning and data from US frontier models.
Attackers are increasingly bypassing multi-factor authentication (MFA) by targeting the processes used to recover lost or compromised accounts via service desks.
Threat actors are increasingly exploiting account recovery workflows to circumvent MFA, turning service desk support into a primary target for identity theft.
Compromised non-human identities (NHIs) like AI agents and service accounts have surpassed phishing as the primary entry point for cyberattacks into organisations, a recent report indicates.
The ClickFix campaign has pivoted from OS-level commands to browser-based JavaScript injection, exploiting Google Sheets to steal cryptocurrency from unsuspecting users.
