Shadow AI adoption is accelerating across professional service firms as employees deploy tools like ChatGPT without organizational oversight or training. Research shows 31% of users receive no employer guidance on responsible AI use, creating blind spots in data handling, client confidentiality, and regulatory compliance.

Security researchers have identified Win.Worm.Coinminer::1201 actively compromising healthcare providers, home security systems, and public administration networks through campaigns attributed to 0APT and KryBit. This worm demonstrates a critical operational reality: attackers achieve significant impact without requiring elevated privileges.

Security researchers have identified DEEP#DOOR, a Python-based backdoor that leverages tunneling services to exfiltrate browser credentials and cloud authentication tokens from compromised systems. The malware deploys through obfuscated batch scripts (install_obf.bat) and establishes persistence via svc.py, a service installation module.

Security researchers have identified two new extortion crews actively replicating the Scattered Spider attack methodology across nine industry verticals including academic institutions, legal firms, financial services, and critical infrastructure.

Automated security analysis has identified 38 vulnerabilities within an electronic health record platform, with three designated as critical CVEs: CVE-2026-23627, CVE-2026-24487, and CVE-2026-24908. These flaws create direct pathways for attackers to compromise patient data and disrupt clinical operations.

Security researchers have disclosed CVE-2026-31431, a nine-year-old vulnerability in the Linux kernel that enables reliable local privilege escalation attacks. This flaw, which has persisted across multiple kernel versions, can be exploited by local attackers to gain root-level access on affected systems.