Industry News

AI tools are making cybercrime easier by helping attackers write malicious code and automate attacks, while criminals also use deepfake technology (synthetic media that realistically mimics people) to impersonate others and commit scams. AI assistants that interact with external tools like email and web browsers pose serious security risks because their mistakes can have real-world consequences, especially when users hand over sensitive personal data to systems like OpenClaw.

This week's threat bulletin highlights attackers increasingly relying on trusted tools and overlooked vulnerabilities rather than novel exploits, with a shift toward quieter, longer-term access over disruptive attacks. Key incidents include a command injection flaw (CVE-2026-20841, a severity rating of 8.8 out of 10) in Windows Notepad that allows remote code execution through malicious Markdown links, over 510 advanced persistent threat operations (coordinated cyberattacks by nation-states or organized groups) targeting 67 countries with 173 focused on Taiwan, and two new information stealers (LTX Stealer and Marco Stealer) harvesting credentials and sensitive data from Windows systems.

Chinese AI companies have recently released open-weight models (AI models whose internal numerical parameters are publicly available for anyone to download and modify) that match Western AI performance at much lower costs, with DeepSeek's R1 and Alibaba's Qwen models becoming among the most downloaded globally. Unlike proprietary Western models like ChatGPT that users access through paid APIs (application programming interfaces, standardized ways for software to communicate), these Chinese open-source models allow developers to inspect, study, and modify the code themselves. If this trend continues, it could shift where AI innovation happens and who establishes industry standards worldwide.

Modern software systems create short-lived infrastructure (ephemeral workloads that exist briefly) much faster than we can manage the identities (digital credentials and access permissions) that control them, creating a dangerous security gap. The text highlights that non-human identities like service accounts and API keys now vastly outnumber human users, yet many organizations still use outdated manual processes to track and remove them, leaving "zombie identities" (old credentials that remain active after their purpose ends) with dangerous access levels. Test environments are particularly risky because they often have weak security controls and direct connections to production systems, making them attractive targets for attackers seeking backdoor access.

Microsoft discovered 9 security vulnerabilities in Windows Administrator Protection, with 5 traced to problems in UI Access implementation, a feature designed to let accessibility tools (like screen readers) interact with administrator-level windows while maintaining security boundaries. The vulnerability stems from how UI Access, which was created to bypass User Interface Privacy Isolation (UIPI, a security mechanism that prevents lower-privilege processes from controlling higher-privilege windows) for accessibility needs, could be abused to escalate privileges.

Criminals are increasingly targeting software developers as a weak point in company security, exploiting their access to source code and cloud systems rather than just finding bugs in applications. Attackers use multiple tactics including malicious open-source packages (libraries of reusable code), compromised development environments (where programmers write code), and fake job applications to gain insider access. Over 454,000 malware-infected open-source packages were discovered in 2025 alone, and developers repeatedly download vulnerable versions of tools like Log4j, expanding their exposure to known security weaknesses.

SSHStalker is a botnet that compromises Linux servers by brute-forcing weak SSH passwords (a method of repeatedly guessing login credentials), affecting at least 7,000 machines by January. The botnet combines old IRC (Internet Relay Chat, a text communication protocol) tactics with modern automation to deploy malware, rootkits (software that gives attackers deep system access), and exploits, though it hasn't yet been used for financial gain. Security experts emphasize that the attack succeeds because organizations neglect basic security practices like strong authentication and patching old vulnerabilities.

A North Korean hacking group called UNC1069 is targeting cryptocurrency companies using AI tools, including LLMs (large language models, which are AI systems trained on huge amounts of text), deepfakes (fake videos or images created by AI), and a technique called ClickFix (a social engineering scam that tricks users into downloading malware by posing as tech support). The group has shifted focus from attacking traditional banks to targeting Web3 companies, which are blockchain-based services in the cryptocurrency space.

OpenAI now allows developers to use Skills (reusable code packages) directly in the OpenAI API through a shell tool, with the ability to upload Skills as compressed files or send them inline as base64-encoded zip data (a way of encoding binary files as text) within JSON requests. The example shows how to create an API call that uses a custom skill to count words in a file, making it easier to extend AI capabilities with custom tools.

GLM-5 is a new, very large open-source AI model (754 billion parameters, which are the adjustable values that make up a neural network) released under the MIT license, making it twice the size of its predecessor GLM-4. The source discusses how developers are increasingly using the term 'agentic engineering' (building software systems where AI acts autonomously to complete multi-step tasks) to describe professional software development with large language models.

Local law enforcement agencies receive "free" surveillance tools like automated license plate readers (ALPRs, cameras that automatically read vehicle plates), facial recognition, and drones from vendors and federal agencies, but this comes at the cost of eroding civil liberties and creating data pipelines to agencies like ICE that can expose people to harm. The article explains that "free" surveillance technology often operates without public oversight through pilot programs and continued vendor support, allowing data collection on people's movements to happen without their knowledge or consent. Cities are urged to reject these programs or, if they proceed, implement oversight mechanisms like public hearings, transparency requirements, and clear use policies before deploying any surveillance tools.

This article discusses how organizations should choose modern SIEM (security information and event management, a system that collects and analyzes security data from across an organization) platforms designed for the 'agentic era' where AI agents automate security tasks. Rather than maintaining fragmented legacy tools, companies should adopt unified, cloud-native platforms that combine data collection, analytics, and response capabilities, enabling both human analysts and AI to detect threats faster and respond more effectively.

The QuitGPT movement is a growing campaign where users are canceling their ChatGPT subscriptions due to frustration with the chatbot's capabilities and communication style, with complaints flooding social media platforms in recent weeks. The article also covers several other tech stories, including potential cost competitiveness of electric vehicles in Africa by 2040, social media companies agreeing to independent safety assessments for teen mental health protection, and regulatory decisions affecting vaccine development.