Microsoft, Cisco and FBI Face the Next Wave of AI Cybercrime

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Each episode delivers clear, actionable intelligence for CISOs, security leaders, and business decision-makers. Today’s top stories:

1. 01

   The FBI is investigating a breach claimed by ShinyHunters, who say they temporarily defaced the agency’s jobs site and stole data on nearly all agents and applicants. The incident could expose sensitive information, damage trust, and elevate the group’s profile while drawing intensified law-enforcement action.

2. 02

   Microsoft says it dismantled EvilTokens, an AI-enabled device-code phishing service linked to more than 12,000 compromised inboxes across 10,000 organizations. The takedown, supported by industry partners and arrests, highlights how AI is making business email compromise easier to automate and scale.

3. 03

   A Chinese-speaking threat actor exploited WordPress and ZyXEL Switch vulnerabilities to breach at least 49 organizations in 29 countries, including a Western government entity. More than 18,500 records containing credentials and personal data were stolen, underscoring the business and national-security risks of slow vulnerability remediation.

4. 04

   Cisco Talos identified CLOSEDQUORUM, a Windows malware implant that queries large language models to select post-compromise actions such as credential theft, persistence, and process injection. Its autonomous behavior could accelerate attacks, making behavioral detection and monitoring of unusual LLM, Discord, and system activity increasingly important.

5. 05

   Microsoft fixed CVE-2026-66804, an incomplete patch for a Windows privilege-escalation flaw involving an orphaned COM registration. The issue shows how a single misconfiguration can enable system-level code execution and why organizations should hunt for vulnerable COM classes across enterprise systems.