Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice.

In this week's episode:

-  Threat actor group GS7 impersonates Fortune 500 companies (incl. Wells Fargo, USAA, Navy Federal, and Fidelity) using spoofed domains with highly accurate cloned login portals.
- Hudson Rock detected the first known case of infostealer malware successfully exfiltrating a victim's OpenClaw AI agent configuration environment
- Researchers tested Claude, ChatGPT, and Gemini for password generation and found all three produce predictable passwords that can be quickly brute-forced.

Like the new format? Have a security topic you want us to cover? Let us know in the comments!

Sources:
- Operation DoppelBrand: Weaponizing Fortune 500 Brands: https://www.darkreading.com/cyberattacks-data-breaches/operation-doppelbrand-weaponizing-fortune-500-brands
- Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens: https://thehackernews.com/2026/02/infostealer-steals-openclaw-ai-agent.html
- Your AI-generated password isn't random, it just looks that way: https://www.theregister.com/2026/02/18/generating_passwords_with_llms