Cybercrime/malcode – Lifeboat News: The Blog

Jul 9
2026

Beyond Agentic AI: The Emergence Of Cognitive AI Ecosystems

In the next decade, AI will likely undergo more significant changes than only becoming more independent; it will also grow more cognitive. AI systems will act as interconnected ecosystems that are capable of contextual awareness, cooperative reasoning, ongoing learning, and adaptive decision-making in almost every facet of society, rather than isolated applications.

Large language models of today are remarkable due to their ability to produce and anticipate information. Persistent memory, multimodal perception, long-term planning, causal reasoning, and self-directed learning within strictly regulated bounds will probably be characteristics of the AI of 2036. Similar to biological neural networks, millions of specialized AI agents will work together to create dynamic intelligence fabrics that continuously optimize national defense, manufacturing, transportation, financial markets, healthcare delivery, and energy grids.

The line between workforce and software will become increasingly hazy. Hundreds of thousands of AI agents working continuously alongside human employees may be employed by organizations as digital workforces. A customized constellation of AI advisers, researchers, legal assistants, financial analysts, engineers, and cybersecurity specialists working around the clock could be present for every knowledge worker. This shift signifies the emergence of an entirely new digital labor force in addition to automation.

Jul 9
2026

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for hands-on access.

Jul 9
2026

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Infoblox says Lurking Lizard has used fake installers, mobile apps, and lookalike domains to recruit devices into a proxy botnet.

Jul 9
2026

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.

Jul 9
2026

New Ghost Phishing Wave Is Breaking Traditional Email Security

EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until browser render.

Jul 9
2026

Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.

The campaign has been observed since May and focuses on physics and engineering departments, administrators and professors, as well as organizations involved in astrophysics, particle physics, or national security-related research.

Researchers at cybersecurity company Proofpoint are tracking the activity under the name ‘UNK_MassTraction’ and believe to be associated with a new threat cluster.

Jul 9
2026

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications.

The threat actor published at least 17 malicious packages simultaneously, each tasked to exfiltrate credentials and access tokens to a command-and-control server hosted on Amazon Web Services (AWS).

All three payment platforms are popular, with Paysafe being mostly used by e-commerce sites and online marketplaces, gaming platforms, travel businesses, and financial services or software-as-a-service (SaaS) providers.

Jul 7
2026

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, and PRT persistence.

Jul 7
2026

BeyondTrust warns of critical flaws in remote access software

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication.

The first vulnerability, tracked as CVE-2026–40138, affects the company’s RS remote desktop and assistance platform (versions 25.3.2 or earlier) and the PRA enterprise cybersecurity solution (versions 25.3.2 or earlier). This vulnerability stems from an improper authentication weakness in the authentication subsystem, and successful exploitation enables attackers without privileges to bypass access controls and access targeted appliances, including accounts with elevated privileges.

The second one (CVE-2026–40139) patched this week stems from improper processing of BeyondTrust RS authentication requests, enabling unauthenticated remote attackers to gain unauthorized access to vulnerable instances.

Jul 6
2026

Why Cybersecurity Matters for America’s AI Leadership

Chuck Brooks is the president of Brooks Consulting International and one of Executive Mosaic’s GovCon Experts.

Artificial intelligence is the defining technology race of the 21st century. It is not only about constructing bigger language models or spending billions on computing infrastructure anymore. It’s about building trust. It will be those governments that can both innovate quickly and also secure their AI systems from cyberattack that will create the future digital economy, national security and the next wave of technology leadership.

This strategic reality is reflected in the White House’s recent executive order on AI innovation and security. Its goals include accelerating AI innovation, enhancing the cybersecurity of federal information systems and allowing for the safe deployment of frontier AI models. More importantly, it recognizes a premise I have preached for years: cybersecurity is no longer a supporting function to digital transformation, but the foundation on which AI innovation rests.