Google Photos upgrades may affect you
The 118th edition of HX Weekly highlights the deep integration of Gemini AI into Google Photos, urging users to review permissions to maintain data privacy. This edition also covers critical security alerts, including Apple account notification scams and help desk impersonation attacks on Microsoft Teams used to deploy malware. With additional reports on "ghost breaches," vulnerability flaws in healthcare systems, and a breach at ADT, the newsletter emphasizes a heightened need for vigilance across the "Internet of Things."
AI working with the scammer
Anthropic recently developed a powerful AI model named Mythos, which demonstrates an unprecedented ability to autonomously execute complex cyberattacks and discover critical system vulnerabilities in minutes. Fearing the model could transform novice hackers into elite operatives, the company chose to restrict its public release, instead providing access to select government agencies and financial institutions for defensive testing.
Upgrading Scams With QR Codes
This edition outlines a diverse range of modern digital threats, emphasizing the rise of QR code phishing and AI-driven fraud. It highlights critical geopolitical tensions, specifically noting increased cyber espionage from Iranian hackers targeting vital infrastructure. Look out for significant institutional shifts, such as proposed budget cuts for CISA and a growing skills gap within the cybersecurity workforce. Stay safe, cultivate proactive defense strategies against deep fakes and impersonation scams.
Attacks from all over
The latest Hexagon Weekly report highlights a significant surge in global cyber threats, specifically emphasizing aggressive digital offensives launched by Iranian-linked actors against American and Israeli targets. Beyond state-sponsored attacks, the source details diverse security risks including supply chain compromises originating from North Korea and the exploitation of connected vehicle technologies. The text serves as an urgent call for increased vigilance, advising users to adopt zero-trust protocols and remain wary of downloading suspicious software or mobile applications. Additionally, the overview addresses institutional challenges, such as the cybersecurity skills gap and critical vulnerabilities found within major cloud infrastructures. Ultimately, the collection of headlines illustrates a rapidly evolving threat landscape where artificial intelligence and sophisticated malware necessitate more robust defensive measures.
Russia targeting your messaging apps
From sophisticated Russian intelligence campaigns targeting your everyday messaging apps to the rise of AI-driven "prompt poaching," the message this week is clear: vigilance is no longer optional. In this edition, we dive into the FBI and CISA’s latest warnings, explore the shifting frontlines of vehicle cybersecurity, and look at how the humble phone call has officially become the new phishing frontier. Whether you’re securing your home router or navigating the new reality of AI-generated scams, we’re here to help you stay one step ahead. Don't let the noise dull your instincts—stay alert, stay skeptical, and stay secure.
Archive
Google Photos upgrades may affect you
The 118th edition of HX Weekly highlights the deep integration of Gemini AI into Google Photos, urging users to review permissions to maintain data privacy. This edition also covers critical security alerts, including Apple account notification scams and help desk impersonation attacks on Microsoft Teams used to deploy malware. With additional reports on "ghost breaches," vulnerability flaws in healthcare systems, and a breach at ADT, the newsletter emphasizes a heightened need for vigilance across the "Internet of Things."
AI working with the scammer
Anthropic recently developed a powerful AI model named Mythos, which demonstrates an unprecedented ability to autonomously execute complex cyberattacks and discover critical system vulnerabilities in minutes. Fearing the model could transform novice hackers into elite operatives, the company chose to restrict its public release, instead providing access to select government agencies and financial institutions for defensive testing.
Upgrading Scams With QR Codes
This edition outlines a diverse range of modern digital threats, emphasizing the rise of QR code phishing and AI-driven fraud. It highlights critical geopolitical tensions, specifically noting increased cyber espionage from Iranian hackers targeting vital infrastructure. Look out for significant institutional shifts, such as proposed budget cuts for CISA and a growing skills gap within the cybersecurity workforce. Stay safe, cultivate proactive defense strategies against deep fakes and impersonation scams.
Attacks from all over
The latest Hexagon Weekly report highlights a significant surge in global cyber threats, specifically emphasizing aggressive digital offensives launched by Iranian-linked actors against American and Israeli targets. Beyond state-sponsored attacks, the source details diverse security risks including supply chain compromises originating from North Korea and the exploitation of connected vehicle technologies. The text serves as an urgent call for increased vigilance, advising users to adopt zero-trust protocols and remain wary of downloading suspicious software or mobile applications. Additionally, the overview addresses institutional challenges, such as the cybersecurity skills gap and critical vulnerabilities found within major cloud infrastructures. Ultimately, the collection of headlines illustrates a rapidly evolving threat landscape where artificial intelligence and sophisticated malware necessitate more robust defensive measures.
Russia targeting your messaging apps
From sophisticated Russian intelligence campaigns targeting your everyday messaging apps to the rise of AI-driven "prompt poaching," the message this week is clear: vigilance is no longer optional. In this edition, we dive into the FBI and CISA’s latest warnings, explore the shifting frontlines of vehicle cybersecurity, and look at how the humble phone call has officially become the new phishing frontier. Whether you’re securing your home router or navigating the new reality of AI-generated scams, we’re here to help you stay one step ahead. Don't let the noise dull your instincts—stay alert, stay skeptical, and stay secure.
War and Cyber Crime
This week, we highlight a significant discrepancy between reports of surging **cybercrime** linked to the Iran war and official government statements downplaying the immediate risks. The text emphasizes the growing danger of **AI-driven attacks**, which are currently outpacing defensive capabilities and being utilized for sophisticated **identity theft and phishing** schemes. Readers are warned about specific vulnerabilities affecting **SaaS applications** and **mobile devices**, alongside reports of state-sponsored hacking operations originating from **North Korea and China**. To address these concerns, the source advocates for **proactive cyber hygiene** and directs the public toward educational resources and technical updates. The publication concludes by announcing a **logo redesign** and a new schedule for security-focused **public service announcements** on social media.
War in cyberspace also?
This week’s intelligence warns of a multi-front digital war, ranging from Iranian state actors deploying pro-Tehran propaganda to sophisticated phishing schemes targeting LastPass vaults and macOS users. With reports of foreign adversaries gaining access to government hacking toolkits and the FBI investigating recent network breaches, the newsletter emphasizes that "we are our own best defenders." Hexagon Center continues its rapid-response mission, producing public service announcements every seven hours to provide the community with the "holistic security" tools needed to navigate these escalating global threats.
The Should-Be Invincible Password Manager Warning and many other warnings
The first week of March 2026 has been characterized by a sharp escalation in nation-state cyber activity and aggressive law enforcement interventions. Geopolitical tensions have fueled a surge in infrastructure-level attacks, most notably involving the Seedworm APT group's infiltration of U.S. defense and banking sectors, alongside disruptive strikes against cloud data centers in the Middle East.LastPass is currently warning users about a sophisticated phishing campaign that uses fake, forwarded internal support threads to create a sense of urgency regarding unauthorized account access or primary email changes.
Cyber attacks spiked but why are payments dropping?
This week in cybersecurity, the focus has shifted toward the dual nature of AI, which is simultaneously boosting threat capabilities—such as advanced vulnerability scanning—and driving new, large-scale defensive initiatives in finance and government policy. Beyond AI, researchers exposed sophisticated methods used by spyware to bypass iOS privacy indicators, while geopolitical actors continue refining tactics for infrastructure-targeted cyber-espionage. Overall, the industry is grappling with these rapid technological advancements, leading to both significant regulatory shifts and market structural adjustments.
Your Google search serving you scams?
A major highlight this week is the weaponization of Google’s AI Overviews. Scammers are successfully injecting malicious information into these summaries to direct users toward phishing sites and fraudulent support portals. This marks a shift from harmless AI "hallucinations" to deliberate security exploitation. Additionally, researchers warned that AI agents like Grok and Copilot could be turned into covert command-and-control channels by hackers.
You can help prevent those breaches
This week's cybersecurity landscape was dominated by major infrastructure breaches at Odido and Singaporean telcos, alongside a surge in AI-driven phishing and the theft of millions of biometric records in Senegal. These incidents highlight that while attackers are getting faster and more automated, consistent cyber hygiene—like enforcing multi-factor authentication, patching software immediately, and retiring unsupported devices—remains the most effective way to close the exposure windows these hackers exploit.
Create a Zero Trust Tax Season
This week’s headlines were dominated by a record-breaking 31.4 Tbps DDoS attack linked to the "apex" of botnets, alongside reports that Italian Winter Olympics systems are being targeted by cyberattacks of Russian origin. Critical data security incidents also emerged, including a breach at fintech firm Betterment exposing 1.4 million accounts and a separate notification from the newsletter platform Substack. Supply chain concerns intensified as the Notepad++ official update mechanism was reportedly hijacked to deliver malware, while researchers uncovered a vast cyber-espionage operation targeting dozens of governments worldwide. Additionally, UK leaders issued a stark warning that the country remains vulnerable to "absorbing" hybrid attacks without stronger offensive deterrence measures.