Sam's News — security — 2026-10-04¶

Security¶

7 ShinyHunters suspect Rey detained in Jordan, cooperating with FBI¶

Saif al-Din Khader, suspected member of the ShinyHunters digital extortion group operating under alias "Rey," has been detained in Jordan and is reportedly assisting the FBI in identifying other group members.

Sources: The Hacker News RSS Update to: ShinyHunters hacker reportedly detained in Jordan and cooperating with FBI

7 China-linked TA419 targets U.S. AI policy experts with Microsoft AitM phishing¶

China-linked cyber group TA419 has conducted phishing campaigns targeting U.S. AI policy experts at think tanks, universities, and legal organizations since April 2025, impersonating Anthropic employees and White House officials using credential harvesting and browser-in-the-browser attacks.

TA419 targeting since April 2025, February–July 2026 campaigns documented
Impersonated Anthropic employee, White House OSTP staff members
Credential harvesting via shortened URLs and Cloudflare Turnstile redirects
Frameless BitB (browser-in-the-browser) attack without iframes
Custom Microsoft sign-in flow tracking via AitM proxy
Attributed to Chinese intelligence monitoring U.S. AI policy and export controls

Sources: The Hacker News AI Web Searched

Anthropic is asking Claude users to voluntarily contribute their voice conversations to help train and improve its AI models.

Sources: BleepingComputer RSS

6.5 Google Gemini AI to gain unrestricted access to macOS files and applications¶

Google's Gemini AI assistant is slated to receive broad permissions to access files, open applications, and browse the web on macOS devices without repeated user prompts.

Sources: BleepingComputer RSS

6.5 Vulnerability exploitation now accounts for 31% of data breach initiations¶

Security research indicates that vulnerability exploitation has become the initial vector for nearly one-third of all data breaches, up significantly from historical trends.

Sources: DesignRush Web Search