CyberStrikeAI tool adopted by hackers for AI-powered attacks

A set of active threats and security incidents was reported: attackers adopted the open-source AI security tool CyberStrikeAI in campaigns linked to breaches of hundreds of Fortinet FortiGate devices; a phishing campaign deployed a fake Google Account PWA to steal credentials, MFA one‑time codes, crypto wallet addresses, and proxy traffic through victims' browsers; a high‑severity 'ClawJacked' flaw in the OpenClaw AI agent allowed websites to hijack local instances; CISA warned that the RESURGE implant can remain dormant on Ivanti Connect Secure devices following exploitation of CVE-2025-0282;