A China-nexus actor has been able to gain long-term access in a bid to gather intel on government agencies and critical infrastructure providers.

Two new reports illustrate why companies need to do a better job of scrutinizing what their human employees and AI agents are doing.

Researchers warn that security teams need to take immediate mitigation steps before a public proof of concept is released.

Experts said companies rushing to buy AI services risked letting their existing, still-vital defensive measures deteriorate.

The Pay2Key group may have shifted its aims from extortion to destruction.