Cybercriminals are using a malicious artificial intelligence (AI) chatbot called GhostGPT for activities such as creating malware and phishing emails. GhostGPT is a tool being sold through Telegram, making it easily accessible for low-skilled cybercriminals. It is designed to connect to jailbroken or open-source language models, allowing uncensored responses. The tool, involved in various cyber malicious activities, has received wide attention on online forums.

Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
A suspected Chinese advanced persistent threat (APT) group exploited CVE-2025-22457, a previously unexploitable buffer overflow bug, to compromise devices running Ivanti Connect Secure (ICS) and