AI agents helped hackers run a cloud credential theft campaign in under six hours, stealing thousands of third-party credentials.

Threat groups are leveraging stolen AI credentials and victim cloud environments to launch distillation attacks and build AI-powered exploitation and post-exploitation pipelines.

A Telegram Desktop flaw lets bots inject JavaScript into exported chats, enabling data theft and page manipulation.