Cloudflare

A sophisticated ClickFix campaign is leveraging the Polygon blockchain to implement 'EtherHiding,' allowing attackers to rotate C2 servers via smart contracts. This technique makes traditional IP and domain blocking ineffective by using a distributed ledger as an attacker-controlled command center.

A security study reveals that AI agents are vulnerable to supply-chain attacks via the new llms.txt documentation standard. By following links in these files, agents like Claude and Codex have been observed executing unowned and potentially malicious code within corporate networks.

Tech giants are moving up their quantum-safe security deadlines to 2029 to combat the accelerating threat of quantum decryption. Organizations are urged to begin cryptographic inventories and implement crypto-agility immediately to protect against 'harvest now, decrypt later' attacks.