Tag: attack
-
Mitre ATTACK Framework to Tackle AI Threats
Version 21 Will Include More AI Hacking Techniques Taken From Actual Incidents. The framework cataloging real-world hacking behavior maintained by federally funded nonprofit Mitre will incorporate more detection strategies and threat intelligence to combat artificial intelligence attacks in its next release this coming spring. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mitre-attack-framework-to-tackle-ai-threats-a-33222
-
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top cyber spy has a blunt message: expect more disruption to everyday services. Abigail Bradshaw, director-general of the Australian Signals Directorate (ASD), says that with each jump in AI capability, more disruption is…
-
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. First seen on cyberscoop.com Jump to article: cyberscoop.com/nefilim-hive-ransomware-affiliate-artem-stryzhak-sentenced/
-
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator.TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously…
-
Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Torrance, United States / California, October 27th, 2026, CyberNewswire AI SPERA, the company behind the cyber threat intelligence and attack surface management platform Criminal IP, has signed a cooperation agreement with the International Criminal Police Organization (INTERPOL) under its Gateway initiative. The agreement establishes a framework for sharing information and technical expertise relevant to cybercrime…
-
5 Latest Updates On PHP2Shell Exploitation
While the U.S. cybersecurity agency has now confirmed exploitation of a pair of critical-severity PHP vulnerabilities, known as PHP2Shell, the extent of successful attacks leveraging the flaws remains unclear. First seen on crn.com Jump to article: www.crn.com/news/security/2026/5-latest-updates-on-php2shell-exploitation
-
Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project’s infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/
-
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices.The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file.Patches for the flaw were released last month by Apple…
-
Bottled water and tinned food sales surge after UK government issues emergency stockpile advice
Retailers also report jump in purchases of wind-up radios and torches to deal with extreme weather and cyber-attacksSales of tinned foods, bottled water, wind-up radios and torches have surged after the UK government advised households to <a href=”https://www.theguardian.com/politics/2026/oct/22/britain-prepare-infrastructure-attacks-hostile-states-wes-streeting”>prepare for emergencies.Retailers have reported a jump in sales of items linked to preparation for emergencies such as…
-
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest, highlighting which attack techniques deserve immediate attention and which remain emerging risks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-huntress-tragic-quadrant-ranking-threats-hitting-businesses-hardest/
-
Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
University of New Mexico (UNM) Health Sciences Center (HSC), the academic medical arm of the University of New Mexico, has suffered a cyberattack that has temporarily … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/university-of-new-mexico-hospitals-cyberattack/
-
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated” targeted attacks on iOS devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/
-
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/
-
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords. Huntress recorded 497 successful sign-ins and more than 200,000 failed attempts during the ten-week campaign, which ran from July 14 through September 22, 2026. Use of the provider’s network does not establish its involvement…
-
Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones
Tags: attack, cyber, cybercrime, exploit, group, hacker, infrastructure, iphone, malicious, spyware, vulnerabilityCybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword exploit kits to vulnerable iPhones. The investigation exposes a scalable spyware distribution model in which attackers exploit advertising infrastructure to reach victims during ordinary browsing. Researchers describe these as “half-click” attacks: users must encounter an infected webpage…
-
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Tags: access, ai, attack, authentication, backup, china, cloud, credentials, cyber, data, framework, hacker, microsoft, open-source, threatHackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more than 2,250 tenants. Successful authentication, however, does not establish data theft. Huntress initially…
-
InWild Attack Abuses AI Agents’ Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/in-the-wild-attack-ai-agents-trust-markdown
-
Exposed LiteLLM Key Enabled PyPI Supply Chain Attack
Unrevoked Credential Exposed in May Enabled Repository Compromise in October. An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded roughly 50,000 times, exposing developer systems, cloud environments and AI provider secrets. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/exposed-litellm-key-enabled-pypi-supply-chain-attack-a-33211
-
‘Gheist’ Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/gheist-stolen-github-tokens-cloud-secrets
-
PwC confirms learning records breached in attack on vendor site
The professional services firm was the subject of a claim by a known ransomware actor. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/pwc-learning-records-breached-attack-vendor/856902/
-
âš¡ Weekly Recap: This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with.And that’s not even the full story.…
-
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
Tags: attackResearchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop… First seen on hackread.com Jump to article: hackread.com/phantomtac-attack-robots-dropping-crushing-objects/
-
Security pros reckon the biggest AI risk comes with an employee badge
Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/ai-tools-security-worry-survey/
-
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week. First seen on therecord.media Jump to article: therecord.media/litellm-hackers-ai-malware
-
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all events together into one coordinated…
-
12 Ransomware Recovery Solutions: The 2026 Buyer’s Verdict Guide
Ransomware recovery is measured on the worst Tuesday: how fast you find the clean point, prove it’s clean, and rebuild at scale without reinfecting yourself. The twelve solutions in this verdict guide attack those minutes differently intelligence platforms, journal-rewind engines, SaaS-protected coverage, vaulted copies, array-speed restores, and the hardening appliances underneath and buying well means…
-
New TRUST#GRAFT Attack Tricks WordPress Admin Browsers Into Installing Malicious Plugins
TRUST#GRAFT, a JavaScript-to-WordPress attack chain that never breaks WordPress authentication. Instead, it borrows the trust placed in an already logged-in administrator’s browser and uses that session to install a persistent PHP backdoor. Many administrators stay signed in to wp-admin in the same profile they use for everyday browsing. That habit gives attackers a usable foothold.…
-
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations.Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events…