Enterprise Security Tech

Cybercriminals are disguising sophisticated malware campaigns as routine recruiting outreach, using fake job descriptions and interview documents to compromise Windows computers with a single click. New research from Cyderes’ Howler Cell threat intelligence team details two separate nine-stage attack chains that exploit the trust surrounding online recruitment. Although the campaigns appear to involve different operators, both use fileless malware, hidden persistence and secu

Florida officials are investigating a cyberattack against the state agency responsible for driver and vehicle records, marking the second reported breach involving Americans’ driver’s license data this month. The Florida Department of Highway Safety and Motor Vehicles said an international cybercriminal organization carried out the attack. The agency said it has contained the breach and is working with law enforcement, but has not disclosed what information was accessed, how

A weakness in an old authentication connection between Dropbox and Lenovo allowed an attacker to enter roughly 5,000 Dropbox accounts without obtaining their passwords, according to company notifications. The compromise targeted Lenovo’s email verification process. An unauthorized party could allegedly create a Lenovo ID using another person’s email address, then present that identity to Dropbox as proof that the attacker controlled the corresponding account. Dropbox accepted

Artificial intelligence is spreading through corporate environments faster than security teams can track it, and new research suggests the biggest risks may be hiding outside traditional cybersecurity controls. Fable Security analyzed 90 days of security telemetry covering approximately 290,000 employees across more than 30 organizations during the second quarter of 2026. Its inaugural AI Behavior Index found that 34 percent of workers had a detectable generative AI applicati

Anthropic researchers have found a new problem hiding inside the rush toward autonomous AI: agents that behave acceptably on their own can become aggressive when other agents stand in the way. In new research on multiagent systems, Anthropic tested how Claude-based agents behave when operating in shared environments, including software projects where multiple agents depend on one another. The company argues that as AI agents spread across codebases, markets, and enterprise sy

A major software supply chain attack targeting LiteLLM has exposed credentials and CI/CD data linked to more than 2,500 organizations, underscoring how deeply AI infrastructure has become embedded in enterprise development environments. New analysis from SOCRadar indicates the incident was significantly broader than the roughly 40-minute window in March 2026 when malicious LiteLLM packages appeared on the Python Package Index, or PyPI. Researchers reconstructed activity spann