#ai
15 articles
From 8 April to 12 May 2026, ZCyberNews covered 34 articles under the ai tag, with a severity mix of two critical, 13 high, five medium, and 13 informational reports. The top threat actors observed were Bluekit and Pushpaganda. The most prominent vulnerability was CVE-2026-31251, carrying a CVSS score of 9.8. Affected sectors included technology, financial services, all, artificial intelligence, and critical infrastructure, while impacted regions spanned Global, United Kingdom, United States, Asia, and Australia.
CRITICALCosyVoice gRPC Server Insecure Deserialization Flaw CVE-2026-31251
CVE-2026-31251: CosyVoice gRPC server deserializes untrusted models via torch.load() without weights_only=True, enabling RCE via crafted .pt files. No patch confirmed.
MEDIUMUK Cyber Agency Warns AI Will Trigger 'Patch Wave' of Urgent Fixes
NCSC warns organizations to brace for a surge of urgent patches as AI accelerates vulnerability discovery, raising exploitation risk. No specific CVEs cited.
HIGHBluekit Phishing Service Offers AI Assistant, 40 Templates
A new phishing-as-a-service platform called Bluekit provides over 40 templates targeting banks, social media, and email providers, plus an AI assistant for drafting lures.
HIGHAI Assistants Reshape Security Priorities for Enterprises
Autonomous AI agents with file and service access are forcing organizations to rethink identity controls, data boundaries, and monitoring — Krebs reports on shifting attack…
MEDIUMGoogle: AI Prompt Injection Attacks Rising, Still Low-Sophistication
Google reports a rise in malicious AI prompt injection attacks, but most remain low-sophistication and harmless. Indirect injection attempts target LLM-integrated apps.
HIGHFake Google Antigravity Installer Steals Accounts via Trojanized AI Tool
Malwarebytes reports a trojanized installer for Google's Antigravity AI tool steals browser cookies and account credentials within minutes, targeting users seeking the leaked software.
HIGHNorth Korean Operatives Use AI and Fake Identities to Infiltrate Companies via
North Korean operatives are using AI tools and forged documents to pass remote job interviews, according to Flare research. The tactic aims to place threat actors inside target companies for long-term espionage and network access.
INFORMATIONALAI SOC Tools Criticized for Automating Triage, Not Reducing Analyst Workload
A new analysis argues most AI-powered security operations center tools merely accelerate alert triage without reducing the underlying workload for analysts, failing to deliver on promises of true automation.
HIGHClickFix Phishing Campaign Masquerades as Claude AI Installer
A phishing campaign uses fake Claude AI installer lures and 'ClickFix' social engineering to trick users into granting remote access, enabling credential theft and financial fraud.
MEDIUMPushpaganda Campaign Exploits Google Discover to Hijack Browser Notifications
A threat operation dubbed Pushpaganda is abusing Google Discover with AI-generated clickbait to trick users into enabling malicious browser notifications, which then deliver phishing and scam content.
MEDIUMAsia's Digital Supply Chain Poses Distinct Security Challenges
Asia's interconnected digital ecosystems, divergent regulatory regimes, and rapid AI adoption are creating unique and complex security risks for regional and global supply chains, according to a new analysis.
HIGHFake Claude AI Website Delivers PlugX RAT via DLL Sideloading
A fraudulent website impersonating Anthropic's Claude AI distributes a self-deleting installer that deploys the PlugX remote access trojan via DLL sideloading.
HIGHFake Claude AI Site Delivers PlugX Malware in Trojanized Installer
A sophisticated phishing campaign uses a counterfeit Claude AI website to distribute a trojanized installer, deploying the remote access trojan PlugX to establish persistent backdoor access.
HIGHAI-Powered Threat Actor Breaches Mexican Government, Exposes Citizen Data
A sophisticated attacker leveraged AI tools like Claude and ChatGPT to breach nine Mexican government agencies, exfiltrating hundreds of millions of citizen records in a multi-month campaign.
HIGHGPT-5 Release: Security Implications for Enterprise Defenders
OpenAI's GPT-5 raises the bar for AI-assisted cyberattacks — spear-phishing at scale, automated exploit generation, and deepfake social engineering. Here's what security teams need to know and do.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.