# Cybercrime Published articles for Cybercrime. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## AI-Enabled Attacks and AI-Based Defense DevFeed: [AI-Enabled Attacks and AI-Based Defense]() Original publisher: [Read original article]() Author: Mark Pesce Published: 2026-09-16T06:31:00Z Content type: opinion Language: en Sources: [www.theregister.com - Articles]() Topics: [Artificial Intelligence]() Tags: [ai](), [ai-and-ml](), [cybercrime](), [frontier-ai](), [qwen]() ### AI overview An opinion article argues that widespread frontier-level AI will make attacks persistent and discusses AI-based defense. ### Source excerpt Frontier-level AI runs everywhere, so attacks will never stop ## Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure DevFeed: [Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure]() Original publisher: [Read original article]() Author: Rem Dudas Published: 2026-09-09T10:00:55Z Content type: article Language: en Sources: [Unit 42]() Topics: [ARKTunnel](), [backdoor]() Tags: [arktunnel](), [backdoor](), [c2](), [cl-cri-1171](), [cybercrime](), [docro-hijacker](), [gaming](), [malware](), [pay-per-install](), [payload](), [remote-access-trojan](), [threat-research](), [youtube]() ### AI overview An investigation of the CL-CRI-1171 cybercrime campaign describes how YouTube gaming lures and SEO poisoning delivered malware through a custom loader. It covers Docro Hijacker, ARKTunnel, and the Insomnia remote access Trojan. ### Source excerpt An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks. The post Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure appeared first on Unit 42. ## Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) DevFeed: [Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-07T18:23:18Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Cybercrime](), [passwords]() Tags: [account-takeover](), [airline](), [airline-miles](), [credit-card-points](), [cybercrime](), [fraud](), [hotel-rewards](), [loyalty-account](), [loyalty-points](), [loyalty-points-fraud](), [podcast](), [points](), [rewards-account](), [rewards-points]() ### AI overview A Lock and Code podcast episode examines loyalty-points theft, why criminals target points balances, and ways companies and consumers can protect against fraud. ### Source excerpt This week on the Lock and Code podcast, we speak with Kim Sutherland about loyalty points fraud and how everyday people can stay safe. ## Black Hat USA 2026: AI is racing ahead of cybersecurity controls DevFeed: [Black Hat USA 2026: AI is racing ahead of cybersecurity controls]() Original publisher: [Read original article]() Author: Tony Anscombe Published: 2026-08-12T13:28:07Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Artificial Intelligence](), [Cybersecurity](), [Vulnerabilities](), [Cybercrime](), [Open Source]() Tags: [ai](), [black-hat](), [business-security](), [conference](), [cybercrime](), [cybersecurity](), [government](), [open-source](), [vulnerabilities]() ### AI overview AI dominated Black Hat USA 2026, where speakers discussed regulation, national leadership, open-source infrastructure, cybercrime, and the rapid discovery of vulnerabilities by AI-powered systems. The article's central concern is accountability and the need for safer, more coordinated AI governance. ### Source excerpt AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong ## Cyber readiness for SMBs: Getting the basics right DevFeed: [Cyber readiness for SMBs: Getting the basics right]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-07-03T12:36:41Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [High Profile Threats](), [vulnerability](), [passwords](), [AI, ML & Data Engineering]() Tags: [ai](), [business-security](), [cybercrime](), [cybersecurity](), [generative-ai](), [malware](), [phishing](), [ransomware](), [vulnerability]() ### AI overview The article argues that SMBs should prioritize familiar security gaps such as phishing, unpatched vulnerabilities, missed alerts, and reused passwords, even as AI helps attackers improve lures and reconnaissance. It says truly AI-powered malware remains uncommon and has not played a significant role in incidents observed by ESET's MDR service. ### Source excerpt AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps ## EvilTokens: A phishing attack that doesn't steal your password DevFeed: [EvilTokens: A phishing attack that doesn't steal your password]() Original publisher: [Read original article]() Author: Christian Ali Bravo Published: 2026-06-15T08:55:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [OAuth 2.0](), [account takeover](), [microsoft 365](), [Microsoft](), [MFA](), [Reconnaissance](), [Authorization]() Tags: [account-takeover](), [attacks](), [authentication](), [cybercrime](), [microsoft](), [microsoft-365](), [oauth](), [phishing](), [process](), [time](), [tokens]() ### AI overview EvilTokens is a phishing-as-a-service kit that abuses Microsoft 365's OAuth 2.0 device authorization flow to compromise accounts without directly stealing passwords. Victims authenticate on Microsoft's genuine login page, unknowingly approving an attacker-controlled device; the resulting access and refresh tokens can enable account takeover and business email compromise. ### Source excerpt A phishing kit subverting Microsoft's legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages ## Anthropic's Mythos and the acceleration of zero-day vulnerability discovery DevFeed: [Anthropic's Mythos and the acceleration of zero-day vulnerability discovery]() Original publisher: [Read original article]() Published: 2026-04-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [anthropic](), [Artificial Intelligence](), [ai-assisted attacks](), [Exploit](), [Vulnerabilities](), [Security](), [Cybercrime]() Tags: [ai](), [ai-assisted-attacks](), [ai-containers](), [anthropic](), [anthropic-mythos](), [chainguard-ai](), [chainguard-containers](), [cybercrime](), [exploit](), [firefox](), [kernel](), [linux-kernel](), [mythos](), [mythos-ai-model](), [security](), [vulnerabilities](), [web]() ### AI overview The article discusses Anthropic's Mythos Preview, an AI system described as capable of finding and exploiting previously undisclosed vulnerabilities. It presents examples involving OpenBSD, FFmpeg, the Linux kernel, and Firefox, and argues that such systems could shorten or bypass traditional vulnerability disclosure timelines. ### Source excerpt Anthropic's Mythos is reshaping zero-day threats. Learn how Chainguard helps you stay ahead with source-built, continuously secure software supply chains. ## Worth Reading: Microsoft Cloud Security, Neuro-Symbolic AI, Linux 7.0, and AI-Driven Cybercrime DevFeed: [Worth Reading: Microsoft Cloud Security, Neuro-Symbolic AI, Linux 7.0, and AI-Driven Cybercrime]() Original publisher: [Read original article]() Author: Russ Published: 2026-04-22T12:11:04Z Content type: article Language: en Sources: [rule 11 reader]() Topics: [Artificial Intelligence](), [Cybercrime](), [Cybersecurity](), [Linux](), [Cloud](), [Kernel](), [Microsoft](), [networking](), [Neural Network]() Tags: [artificial-intelligence](), [cloud](), [cybercrime](), [cybersecurity](), [kernel](), [linux](), [machine](), [microsoft](), [networking](), [neural](), [worth-reading]() ### AI overview This roundup covers a federal cybersecurity assessment of a major Microsoft cloud offering, the evolution of neuro-symbolic artificial intelligence, the Linux 7.0 kernel release, and the threat of AI-driven cybercrime to small businesses. ### Source excerpt In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. This report explores the evolution and current state of neuro- symbolic artificial intelligence, an approach that integrates neural network capabilities with symbolic reasoning. The Linux 7.0 kernel is now out, and it's one of the most impactful releases in years for networking professionals. The human-speed defense of small business is being obliterated by the machine-speed offense of AI-driven cybercrime. Today, what large companies treat as a manageable risk is a terminal expense for small enterprises, with 60% of small enterprises shutting down within six months of a major attack. The original frustration was familiar. You build on one provider, they change pricing, deprecate an API, or just aren't the right tool anymore, and migrating is brutal. ## What the ransom note won't say DevFeed: [What the ransom note won't say]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-04-20T09:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ransomware](), [Cybercrime](), [incident](), [Network](), [Tooling](), [data]() Tags: [cybercrime](), [data](), [incident](), [network](), [ransomware](), [tooling]() ### AI overview The article explains that modern ransomware is an organized business operation involving developers, affiliates, initial access brokers, suppliers, partners, subscription services, and tooling markets. It argues that focusing only on the visible ransom note obscures the supply chains and coordinated infrastructure that enable successful attacks. ### Source excerpt An attack is what you see, but a business operation is what you're up against ## 2026: The year of AI-assisted attacks DevFeed: [2026: The year of AI-assisted attacks]() Original publisher: [Read original article]() Published: 2026-04-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Cybercrime](), [Hacking](), [Large Language Model](), [Claude Code](), [ChatGPT](), [Malware]() Tags: [ai](), [ai-assisted-attacks](), [ai-containers](), [axios](), [breach](), [chainguard-for-ai](), [chatgpt](), [claude-code](), [code](), [cybercrime](), [llm](), [malicious-packages](), [malwhere](), [mythos](), [phishing](), [telnyx](), [trivy]() ### AI overview The article argues that AI-assisted attacks became more capable and accessible in 2025. It describes how ChatGPT, Claude Code, and other LLM-backed systems enabled nontechnical individuals and lone actors to conduct attacks previously associated with skilled hackers or organized teams, while citing increases in malicious packages, cloud intrusions, and AI-generated phishing. ### Source excerpt AI is lowering the barrier to cybercrime. Learn why attacks are rising fast, and how eliminating entire classes of supply chain risk is the only path forward. ## Protecting education: How MDR can tip the balance in favor of schools DevFeed: [Protecting education: How MDR can tip the balance in favor of schools]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-03-04T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Security Attacks]() Tags: [ai](), [attacks](), [business-security](), [cybercrime](), [cybersecurity](), [education](), [identity](), [phishing](), [ransomware](), [social-engineering]() ### AI overview The article examines cybersecurity threats facing schools, colleges, and universities, including ransomware, phishing, credential theft, and AI-assisted attacks. It presents managed detection and response as a way for education institutions to detect and contain intrusions faster. ### Source excerpt The education sector is notoriously short on cash, but rich in assets for threat actors to target. How can managed detection and response (MDR) help learning institutions regain the initiative? ## Naming and shaming: How ransomware groups tighten the screws on victims DevFeed: [Naming and shaming: How ransomware groups tighten the screws on victims]() Original publisher: [Read original article]() Author: Guilherme Arruda Tomáš Foltýn Published: 2026-02-12T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ransomware](), [Cybercrime](), [data](), [Security](), [incident](), [Encryption]() Tags: [cybercrime](), [data](), [encryption](), [incident](), [ransomware](), [security]() ### AI overview The article explains how ransomware groups use dedicated data leak sites as part of double-extortion campaigns. Attackers exfiltrate corporate data, encrypt systems, and publish samples or threaten full disclosure to pressure victims into paying. ### Source excerpt When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle ## Drowning in spam or scam emails? Here's probably why DevFeed: [Drowning in spam or scam emails? Here's probably why]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-01-27T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Security](), [Cybercrime](), [Malware](), [spoofing](), [obfuscation](), [pii](), [data](), [Internet](), [Netflix]() Tags: [cybercrime](), [data](), [digital-security](), [internet](), [malware](), [obfuscation](), [phishing](), [pii](), [scam](), [security](), [spoofing]() ### AI overview This article explains why inboxes can suddenly be flooded with spam and scam emails. It identifies data breaches, leaked personal information, updated phishing kits, spam-filter bypasses, and targeted campaigns as possible causes, and describes risks including credential theft, financial fraud, and malware installation. ### Source excerpt Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons - and how to stem the tide. ## Credential stuffing: What it is and how to protect yourself DevFeed: [Credential stuffing: What it is and how to protect yourself]() Original publisher: [Read original article]() Author: Christian Ali Bravo Published: 2026-01-08T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [passwords](), [Cybercrime](), [Malware](), [Bot](), [browsers](), [Forms]() Tags: [apis](), [attacks](), [bots](), [breach](), [browsers](), [cybercrime](), [digital-security](), [forms](), [malware](), [passwords]() ### AI overview The article explains credential stuffing, in which attackers automate the use of previously exposed username-and-password pairs against online services. It describes how password reuse, data breaches, infostealer malware, bots, and automated tools enable attacks, and contrasts credential stuffing with brute-force attacks. ### Source excerpt Reusing passwords may feel like a harmless shortcut - until a single breach opens the door to multiple accounts ## A brush with online fraud: What are brushing scams and how do I stay safe? DevFeed: [A brush with online fraud: What are brushing scams and how do I stay safe?]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2025-12-23T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybercrime](), [data](), [QR Code](), [Malware](), [online privacy]() Tags: [cybercrime](), [data-breaches](), [fraud](), [identity](), [malware](), [phishing](), [qr-code](), [scams]() ### AI overview The article explains brushing scams, in which fraudsters send unsolicited low-value packages to manipulate marketplace ratings and reviews. It warns that such activity may indicate exposed personal data, identity-fraud risk, or phishing and malware threats delivered through QR codes. ### Source excerpt Have you ever received a package you never ordered? It could be a warning sign that your data has been compromised, with more fraud to follow.