Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

In a rare clustering of activity, four distinct espionage groups were observed deploying the same exploit kit, dubbed BlueMoon, within a seven-day window. The kit weaponized separate zero-day vulnerabilities in Google Chrome and Microsoft Windows, allowing for remote code execution and privilege escalation. This shared infrastructure suggests either a common exploit vendor or the rapid dissemination of a private bypass, ...

In this week's cybersecurity roundup, we cover three major stories: the rise of ASCII smuggling in phishing campaigns, the U.S. disruption of the Xinbi Guarantee scam marketplace with a $52.8 million crypto freeze, and the PoisonedRefresh Linux rootkit targeting F5 BIG-IP APM devices.

## Story 1: ASCII Smuggling Phishing

ASCII smuggling, a technique previously used in AI prompt injection attacks, is now being widely adopted by spammers and phishers. This method exploits Unicode control charact...

This week's cybersecurity roundup covers Microsoft's record-breaking September 2026 Patch Tuesday, a new privilege escalation PoC for CrowdStrike Falcon, and the arrest of crypto scammers after a $240 million Bitcoin theft.

Story 1: Microsoft September 2026 Patch Tuesday

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited zero-days. The patches cover a wide range of products, with critical fixes for remote code execution and privileg...

In this video, we cover three major cybersecurity stories: a data breach at Mathspace affecting over 1 million users, active exploitation of MikroTik RouterOS vulnerabilities, and new research on AI-assisted cyber attacks. Stay informed on the latest threats and mitigations.

## Story 1: AI-Assisted Cyber Attack Research

Unit 42 published an investigation detailing how AI is being used to enhance cyber attacks. The report shows attackers leveraging AI for reconnaissance, phishing, and evasion, m...

In this episode, we cover three major cybersecurity incidents: the theft of an AI model evaluator's API key leading to significant financial loss, the evolution of the ClickFix social engineering toolkit, and a massive healthcare data breach affecting millions of patients.

**Story 1: METR API Key Theft Drains ~$600,000 in AI Credits**

Attackers stole an API key belonging to METR (Model Evaluation & Threat Research), an AI safety organization, and used it to consume approximately $600,000 worth...

In this week's cybersecurity roundup, we cover three major stories: infostealer malware draining Anthropic Claude subscriptions, a healthcare breach affecting pacemakers and millions of patient records, and Check Point Research uncovering fake school websites and a new obfuscation technique.

## Story 1: Infostealer Malware Hijacks Claude Sessions

Anthropic has issued a warning about infostealer malware that hijacks active Claude AI sessions to drain usage quotas and steal subscription credenti...

In this video, we cover three major cybersecurity stories: the resurgence of Scattered Spider, a new extortion group targeting Manchester Airports, and an exploited zero-day in PaperCut. Stay informed with the latest threats and patches.

## Story 1: Scattered Spider Returns

Scattered Spider, a notorious cybercrime group, has been linked to a new wave of attacks, including a recent incident involving the ATF and DOJ. The group, known for sophisticated social engineering and ransomware deployment...

Story 1: Two alleged TeamPCP hackers arrested in Australia. The Australian Federal Police (AFP), with the FBI and Western Australia Police Force, charged two men from Western Australia for their alleged roles in the global TeamPCP cybercrime group. The arrests are part of a coordinated international disruption operation targeting the group's ransomware and data extortion activities.

• https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia/

• https://www.afp.gov.au/...

Three major cybersecurity stories dominate this week: a social engineering attack on ReliaQuest, a massive Carhartt data breach, and the Lapsus$ gang's GTA 6 extortion. Here is the full breakdown with sources.

**Story 1: ShinyHunters Taunts ReliaQuest After Employee Falls for Social Engineering**

The threat actor ShinyHunters claims to have breached ReliaQuest by tricking an employee through a social engineering attack. ReliaQuest has denied that the attack compromised core systems, but ShinyH...

In this video, we cover three major cybersecurity stories from August 25, 2026.

**AliExpress Fingerprinting Shoppers with Silent Audio**

AliExpress has been accused of using silent audio to fingerprint shoppers, potentially violating privacy. The technique was discovered when a developer's headphones were mysteriously muted, leading to an investigation. This method allows the company to track users across devices and browsers.

• https://www.theregister.com/security/2026/08/24/aliexpress-accused...