Loading story…
Security researchers reported that AI assistants with web-browsing/URL-fetch features can be repurposed as stealthy command-and-control (C2) relays, allowing attackers to proxy commands and exfiltrate data through legitimate-looking enterprise traffic. Check Point’s proof-of-concept, dubbed “AI as a C2 proxy,” demonstrated abuse paths against Microsoft Copilot and xAI Grok, including scenarios that do not require an API key or even a registered account, complicating common mitigations such as key revocation or account suspension.
Separately, organizations are responding to broader AI data security and privacy concerns by restricting AI tooling: the European Parliament reportedly disabled built-in AI features on lawmakers’ work devices due to uncertainty over what data is uploaded to AI vendors’ cloud services and the risk of sensitive correspondence exposure. In healthcare, ECRI Institute researchers flagged AI chatbots as a leading 2026 health-tech hazard, citing safety, security, and privacy risks from unvalidated clinical use, alongside ongoing concerns about IT outages and legacy medical device cybersecurity—reinforcing that AI adoption is increasingly being treated as a governance and risk-management issue, not just a productivity upgrade.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
Palo Alto Networks Unit 42 recently described a related method in which client-side calls to trusted LLM services dynamically generate malicious JavaScript at runtime to assemble phishing pages and evade some security controls.
Check Point researchers showed that Microsoft Copilot and xAI Grok can be manipulated through crafted browsing and summarization prompts to relay command-and-control traffic and support data exfiltration from already-compromised hosts.
The European Parliament reportedly turned off built-in AI features on lawmakers' work devices over cybersecurity and privacy concerns about confidential data being uploaded to cloud AI services. An internal IT assessment said it could not guarantee the security of uploaded data and was still evaluating what information had been shared with AI providers.
ECRI Institute identified AI chatbots as the top health technology hazard for 2026, warning of safety, security, and privacy risks from their use in clinical contexts by patients and clinicians.
A 2024 ransomware attack on UnitedHealth Group's Change Healthcare unit disrupted thousands of U.S. healthcare providers for months, becoming a major reference point for healthcare IT outage risk.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
thehackernews.com
Open sourcetechcrunch.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security researchers and enterprise administrators are warning that connecting AI assistants such as **Claude**, **ChatGPT**, and **Copilot** to business platforms like Microsoft 365, Gmail, Slack, Dropbox, Zoom, Outlook, SharePoint, and OneDrive can sharply expand the attack surface. Reporting on the connector ecosystem said hundreds of integrations changed within weeks and many can pass data to additional AI services or subprocessors, complicating governance and creating hidden exposure outside primary enterprise controls. Anthropic documentation also notes that connected services process data on their own infrastructure and under their own terms, adding compliance concerns for organizations handling sensitive or regulated information. The operational risk is not limited to data access: security coverage described **"authority laundering"**, where untrusted input is transformed by one AI system into trusted instructions for another system authorized to act, including a cited case involving fund movement. Sysadmin discussions echoed those concerns, with organizations debating whether to allow broad OAuth access to Outlook, Teams, calendars, files, and even local device control, especially in HIPAA-regulated environments. Microsoft is meanwhile replacing Outlook's confusing **Meeting Insights** feature with a deeper **Microsoft 365 Copilot** meeting-prep experience, while vendors such as Ledger are promoting safer agent designs that keep AI actions read-only until a human approves sensitive operations on hardware.
Jul 19, 2026
Meta suspended its internal Model Capability Initiative after an internal error reportedly made sensitive employee monitoring data broadly accessible inside the company, intensifying criticism of a program that collected workplace activity from tools including Gmail, Google Chat, Meta AI, screenshots, and usage patterns. Meta said it found no evidence of malicious activity or an external breach, but the incident renewed concerns about consent, unencrypted storage, and how far companies are going to feed AI systems with employee data. Similar privacy concerns surfaced in the Netherlands, where a watchdog said the AIVD and MIVD intelligence services mishandled bulk datasets containing personal information through weak controls, excessive retention, and inadequate oversight, raising alarms that AI-assisted analysis could be applied to unlawfully sourced or improperly retained citizen data. At the same time, new reporting and vendor changes underscored how quickly enterprise AI is expanding the attack surface and governance burden. Orca Security said **81.2%** of organizations running AI packages had at least one known vulnerability and that **99.9%** of fixable AI vulnerability alerts remained unpatched, with risks spanning agent frameworks, vector databases, exposed API keys, excessive permissions, weak authentication, and internet-facing services such as Amazon SageMaker, Azure OpenAI, and Google Vertex AI. Microsoft is adding an in-meeting Teams control to disable Copilot, Facilitator, and recap features during sensitive discussions, while broader industry debate has focused on employees oversharing data with AI assistants, the need to govern agent identities and registries, and warnings that AI prompts, memory, and orchestration layers can leak or concentrate proprietary organizational knowledge if enterprises do not retain tight control over access, telemetry, and data handling.
Jul 16, 2026
Enterprises’ rapid deployment of **AI and agentic AI** is increasingly creating measurable security and business risk, including direct exposure of sensitive personal data and downstream impacts on risk transfer. A widely cited example involved McDonald’s *McHire* applicant-screening platform (built by *Paradox.ai*), where researchers reported a trivial backend credential weakness (`123456` as both username and password) and no MFA, potentially exposing data tied to roughly **64 million** applicants; the incident is being used by insurers and risk teams as evidence that AI adoption is moving faster than security and governance, contributing to tighter cyber-insurance language, higher premiums, and **AI-related exclusions**. Separate reporting also highlighted that “plug-and-play” AI is unrealistic at enterprise scale, with organizations increasingly needing custom integration and operational ownership rather than relying on off-the-shelf tools. Threat reporting during the same period reinforced that AI is expanding both attacker capability and the attack surface: researchers described **Pakistan-linked APT36** using AI coding tools to generate high volumes of low-quality malware variants (including in less common languages) and to leverage legitimate cloud services for command-and-control, complicating detection. Additional research flagged **AI-themed browser extensions** (Chrome/Edge) that impersonate legitimate tools and can harvest LLM chat histories and browsing activity, underscoring the risk of “shadow AI” and unvetted add-ons. In parallel, routine threat-intelligence summaries continued to track major incidents (e.g., ransomware and data breaches) alongside AI-enabled tactics, indicating that AI risk is becoming intertwined with broader enterprise security exposure rather than remaining a standalone technology concern.
Jun 29, 2026