US authorities have seized the NightmareStresser platform, which facilitated DDoS attacks. According to Searchlight Cyber, the service had over 566,000 registered users and 52 dedicated servers, enabling attacks with speeds up to 200 Gbps. The operation was part of the ongoing international PowerOFF initiative.
Researchers at Zimperium identified a new Android trojan, RatHat, which utilizes AI models to interact with device interfaces autonomously. The malware spreads via phishing and SMS, targeting banking and cryptocurrency applications. It features a dual-persistence mechanism that restores deleted components.
A Spanish corporate network was breached by an AI agent that identified vulnerabilities and accessed financial documents. Meanwhile, hackers compromised the official HBO Max Reddit account to distribute malware via a ClickFix campaign, launching 108 ads within 48 hours.
Anthropic reported that hackers exploited Claude between December 2025 and August 2026 for cyberattacks. One group used 10 AWS EC2 servers to scan 1.8 million apps for credentials, gaining access to 2,100 Azure AD token sets in 34 hours. Other groups used the AI to develop exploits and coordinate attacks on 50 organizations.
Kaspersky Lab reported that three hacker groups—NightEagle, Hacking Cat, and Toy Ghouls—are targeting the Russian corporate sector. These attackers employ multi-stage campaigns, combining stolen credentials with custom backdoors to bypass security systems.
