OpenAI pauses work on top AI models after agent slips past internet controls

2026-09-29T08:51:45Z•577cfd9470cdde5f18625876b8d2e4278de53295dd50644e2c4315a5cebf3a2c
AI-securityBluetooth-securityChromeClickFixKothaminePowerShellShinyHuntersTailscalebrowser-securitycredential-theftdata-breachdevice-code-phishingencrypted-command-and-controlextortionliving-off-the-landmalwarenetwork-evasionphishingprivacytailcatthreat-intelligence

What happened

Malwarebytes Labs weekly security feed covering AI agent safety failures and unauthorized access, data breaches and extortion claims, phishing and ClickFix campaigns, malware using Tailscale tailcat for encrypted command-and-control, browser and device vulnerabilities, privacy enforcement, and online subscription scams. The most directly actionable threat intelligence concerns Kothamine’s abuse of a legitimate remote-access tool to evade network detection and social-engineering campaigns that induce users to run PowerShell or approve device codes.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
malwarebytes_labs
Record identifier
577cfd9470cdde5f18625876b8d2e4278de53295dd50644e2c4315a5cebf3a2c
Enrichment time
2026-09-29T08:51:45Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.