ThreatVectr
Tag

#Mandiant

10 stories taggedMandiant.

A computer screen showing multiple AI agent windows running coordinated tasks—one scanning networks, one attempting credential theft, one accessing systems—repr
AI Security

Criminals Are Wiring Up AI 'Agents' to Steal Passwords at Scale, Google Warns

Google's threat researchers say attackers have moved past chatbot prompts and are building small squads of AI programs that plan, scan and steal on their own.

4 min read
A corporate boardroom during an announcement, with a portrait or silhouette being added to the board of directors display, cybersecurity firm history and accomp
AI Security

Amazon Adds Mandiant Founder Kevin Mandia to Its Board

Kevin Mandia, the cybersecurity veteran who built Mandiant into one of the world's best-known breach investigation firms, joined Amazon's board of directors on 8 September 2026.

3 min read
A computer server room with glowing neural network visualizations on displays, an open access panel revealing circuitry, and a shadowy figure's hand reaching to
Threat Intelligence

Spies and Criminals Are Stealing AI Systems, Not Just Data

Google's threat research team says nation-state hackers and extortion gangs are now going after the AI models, cloud accounts, and secret access keys that companies use to run artificial intelligence, turning those stolen assets into weapons for their own attacks.

4 min read
A financial institution's payment processing center with transaction monitoring dashboards, Brazilian currency visible, payment software interfaces showing unau
Threat Intelligence

Brazil hit by 'Breeze Comet' crew draining bank accounts through payment software

Google's Mandiant team says the group has quietly siphoned money from Brazilian financial institutions and merchants since 2024 by hijacking the software that moves payments around.

4 min read
A telephone headset positioned next to a computer screen displaying cloud account access logs, representing the vishing attacks that preceded data theft from ma
Threat Intelligence

Hedge Fund Vishing Attacks Traced to UNC6671, the Group Behind the BlackFile Brand

Google's threat researchers say one core crew is running help-desk phone scams that have hit Point72, Citadel, Two Sigma and Millennium, then stealing data straight from their cloud accounts.

4 min read
A command center with multiple large display screens showing AI threat detection dashboards with real-time attack indicators, operators seated at workstations m
AI Security

Google Spent $32 Billion on Wiz. Now It Wants AI to Fight Hackers So Fast Humans Can't Keep Up

Criminals can hand off access to a breached company in 22 seconds. Google says only AI can respond that quickly, and it has built a new automated defence platform to prove it.

4 min read
Illustration: a large municipal water treatment facility at dusk, concrete reservoir tanks and pipe infrastructure visible
Threat Intelligence

Iranian Group Handala Claimed It Could Poison California's Water. Forensics Say Otherwise.

California Water Service brought in Mandiant after Handala threatened disruption. Investigators found no evidence the group ever touched operational technology.

3 min read
Illustration: a rack-mounted enterprise SD-WAN router in a dim data center aisle, status LEDs glowing amber and green
Vulnerabilities

Cisco Catalyst SD-WAN Bug Hit as Zero-Day Months Before Disclosure

Mandiant says an unidentified actor exploited CVE-2026-20245 for at least two months before Cisco's public advisory, gaining root on affected appliances.

3 min read
Illustration: an empty modern law-firm reception desk at dusk
Threat Intelligence

UNC3753 Hit U.S. Professional Services Firms With Vishing and Walk-In Intrusions

Dozens of legal and financial firms were hit between January and May 2026 in a data-theft extortion campaign that blended phone-based social engineering with physical office visits.

3 min read
Illustration: a classroom with a laptop showing a hacked login page, symbolizing a cyber attack on education
Breaches

The Login Page That Demanded a Ransom

ShinyHunters defaced Canvas mid-finals week, taking the learning platform offline and exposing what one researcher calls an eight-month attack arc against Instructure.

3 min read
© 2026 Threat Vectr