Collecting Cyber-News from over 60 sources

Tag: tool

Russian group uses AI to exploit weakly-protected Fortinet firewalls, says Amazon

Feb 24, 2026 6:01 AM

Tags: access, ai, api, attack, authentication, business, ciso, control, credentials, cybersecurity, data-breach, detection, exploit, firewall, fortinet, group, Internet, linkedin, malicious, mfa, monitoring, network, password, russia, software, threat, tool, vpn, vulnerability

Recommendations: The Amazon report makes a number of recommendations to network admins with FortiGate devices. They include ensuring device management interfaces aren’t exposed to the internet, or, if they have to be, restricting access to known IP ranges and using a bastion host or out-of-band management network. As basic cybersecurity demands, all default and common…
Zero Trust Infrastructure for Multi-LLM Context Routing

Feb 24, 2026 5:00 AM

Tags: infrastructure, LLM, tool, zero-trust

Learn how to secure multi-LLM context routing with Zero Trust and Post-Quantum cryptography. Protect MCP deployments from tool poisoning and prompt injection. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/zero-trust-infrastructure-for-multi-llm-context-routing/
Why Claude Code Security Has Shaken the Cybersecurity Market

Feb 24, 2026 5:00 AM

Tags: ai, application-security, cybersecurity, tool, vulnerability

How Claude’s New AI Code Scanning Tool Will Challenge Application Security Leaders Anthropic’s debut of Claude Code Security jolted cybersecurity stocks and intensified competition in application security testing. It promises deep reasoning around identifying and remediating code vulnerabilities but faces steep challenges matching the feature breadth required by large enterprises. First seen on govinfosecurity.com Jump…
Spitting Cash: ATM Jackpotting Attacks Surged in 2025

Feb 24, 2026 1:01 AM

Tags: attack, finance, tactics, tool

The attacks cost banks more than $20 million in losses last year, as criminals used many of the same tools and tactics they have wielded for more than a decade. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/atm-jackpotting-attacks-surged-2025
Russian-speaking hackers used gen AI tools to compromise 600 firewalls, Amazon says

Feb 23, 2026 7:01 PM

Tags: ai, firewall, hacker, intelligence, russia, threat, tool

A Russian-speaking threat actor used commercial generative artificial intelligence tools to help compromise more than 600 FortiGate firewall devices across more than 55 countries earlier this year, researchers have found. First seen on therecord.media Jump to article: therecord.media/gen-ai-fortigate-hackers-russia
AI helps novice threat actor compromise FortiGate devices in dozens of countries

Feb 23, 2026 6:01 PM

Tags: ai, exploit, network, threat, tool

Generative AI tools analyzed target networks and wrote exploit code, giving an opportunistic attacker an outsized impact, according to a new Amazon report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cyberattacks-fortigate-amazon/812830/
Global regulators say AI image tools don’t get a free pass on privacy rules

Feb 23, 2026 6:01 PM

Tags: ai, data, law, privacy, tool

Watchdogs warn models that can generate realistic images of people must comply with data protection laws First seen on theregister.com Jump to article: www.theregister.com/2026/02/23/privacy_watchdogs_ai_images/
Shai-Hulud-Like Worm Targets Developers via npm and AI Tools

Feb 23, 2026 6:01 PM

Tags: ai, malicious, malware, supply-chain, tool, worm

Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/
Liminal Expands To MSPs With Secure, Multi-Model AI Platform

Feb 23, 2026 5:02 PM

Tags: ai, LLM, msp, tool

Secure AI platform Liminal is expanding beyond the enterprise in a bid to help MSPs enable secure adoption of LLM-powered tools among SMB customers”, an area that has often proven challenging for MSPs in the past, executives told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/liminal-expands-to-msps-with-secure-multi-model-ai-platform
Top Technology Stacks for MVP Development in 2026

Feb 23, 2026 4:00 PM

Tags: framework, startup, technology, tool

Top technology stacks for MVP development in 2026, best tools for fast launch, scalability, cost efficiency, and proven frameworks for startups building products. First seen on hackread.com Jump to article: hackread.com/top-technology-stacks-mvp-development-2026/
âš¡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More

Feb 23, 2026 3:01 PM

Tags: ai, cloud, ddos, docker, malware, risk, service, tool

Security news rarely moves in a straight line. This week, it feels more like a series of sharp turns, some happening quietly in the background, others playing out in public view. The details are different, but the pressure points are familiar.Across devices, cloud services, research labs, and even everyday apps, the line between normal behavior…
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls

Feb 23, 2026 2:00 PM

Tags: ai, attack, cyber, firewall, fortinet, russia, threat, tool

A low-skilled Russian-speaking attacker has used GenAI tools to help deploy a successful attack workflow targeting FortiGate instances First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russian-threat-actor-genai/
AWS says more than 600 FortiGate firewalls hit in AI-augmented campaign

Feb 23, 2026 1:01 PM

Tags: ai, cybercrime, firewall, group, russia, tool

Off-the-shelf tools helped Russian-speaking cybercrime group run riot First seen on theregister.com Jump to article: www.theregister.com/2026/02/23/aws_fortigate_firewalls/
AI-powered campaign compromises 600 FortiGate systems worldwide

Feb 23, 2026 1:01 PM

Tags: ai, cybercrime, intelligence, russia, service, threat, tool

A Russian-speaking cybercriminal used commercial generative AI tools to hack over 600 FortiGate devices across 55 countries. Amazon Threat Intelligence reports that a Russian-speaking, financially motivated threat actor used commercial generative AI services to compromise more than 600 FortiGate devices in 55 countries. The activity, observed between January 11 and February 18, 2026, highlights how…
Die unsichtbare KI-Revolution die Risiken von Schatten-KI

Feb 23, 2026 10:02 AM

Tags: ai, risk, tool

Offiziell ist KI in vielen Unternehmen noch »in der Pilotphase«, inoffiziell längst Alltag diese »Schatten-KI« ist produktiv und bequem, aber aus Sicherheitssicht ein Blindflug. In vielen Unternehmen läuft die KI-Revolution bereits auf Hochtouren. Drei von vier Knowledge-Workern nutzen KI im Job. Mehr als die Hälfte nutzt jedoch Tools, die der IT-Abteilung und den… First seen…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
Remote Code Execution – Beyondtrust Remote-Tools unter Beschuss

Feb 23, 2026 8:00 AM

Tags: remote-code-execution, tool

First seen on security-insider.de Jump to article: www.security-insider.de/kritische-sicherheitsluecke-beyondtrust-tools-a-2a4495bd643862913992f0a092ed2cdd/
Attacker Breached 600 FortiGate Appliances in AI-Assisted Campaign: Amazon

Feb 23, 2026 7:02 AM

Tags: ai, cybercrime, fortinet, technology, threat, tool

An single threat actor used AI tools to create and run a campaign that compromised more then 600 Fortinet FortiGate appliances around the world over five weeks, according to Amazon threat researchers, the latest example of how cybercriminals are using the technology in their attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/attacker-breached-600-fortigate-appliances-in-ai-assisted-campaign-amazon/
Coroot: Open-source observability and APM tool

Feb 23, 2026 7:02 AM

Tags: monitoring, open-source, software, tool

Coroot is an open-source observability and application performance monitoring tool. The core software, published in Go and accompanied by companion repositories such as … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/23/coroot-open-source-observability-apm-tool/
Anthropic unveils Claude Code Security to detect and fix code bugs

Feb 23, 2026 5:01 AM

Tags: ai, flaw, service, software, tool, vulnerability

Anthropic launches Claude Code Security, an AI tool that scans code for vulnerabilities and suggests how to address them. Anthropic has introduced Claude Code Security, a new AI-powered service designed to scan software codebases for vulnerabilities and recommend fixes. Built into Claude Code, the tool aims to help teams detect and remediate security flaws faster.…
Anthropic’s AI Bug Hunter Jolts Cyber Stocks

Feb 22, 2026 8:01 PM

Tags: ai, cyber, cybersecurity, tool

AI Code Scanner Rattles a $200B Industry. Anthropic launched Claude Code Security, an AI tool that found 500+ undetected bugs in production code. Cybersecurity stocks dropped sharply, but analysts are split on whether the disruption signals a genuine industry reckoning or a market overreaction. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/anthropics-ai-bug-hunter-jolts-cyber-stocks-a-30821
NDSS 2025 The Midas Touch: Triggering The Capability Of LLMs For RM-API Misuse Detection

Feb 22, 2026 6:01 PM

Tags: api, china, conference, cyber, detection, framework, Internet, LLM, network, open-source, service, software, tool

Session 13B: API Security Authors, Creators & Presenters: Yi Yang (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Jinghua Liu (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Kai…
Amazon’s vibe-coding tool Kiro reportedly vibed too hard and brought down AWS

Feb 21, 2026 4:00 PM

Tags: access, control, tool

Bezos-corp blames user error for outage, ‘specifically misconfigured access controls’ First seen on theregister.com Jump to article: www.theregister.com/2026/02/20/amazon_denies_kiro_agentic_ai_behind_outage/
Anthropic Debuts Claude Code Security AI Now Scan Vulnerabilities in Your Entire Codebase

Feb 21, 2026 1:02 PM

Tags: ai, cyber, tool, update, vulnerability

Anthropic has quietly flipped the script on application security. On February 20, the company launched Claude Code Security, a new capability baked directly into Claude Code on the web that automatically scans entire repositories for sophisticated vulnerabilities and delivers ready-to-review patch suggestions. Unlike legacy SAST tools that rely on rigid signature matching, Claude Code Security uses…
Why Legacy Software Modernization is Critical for Data Security

Feb 21, 2026 5:01 AM

Tags: data, email, software, tool

An in-depth Suped review covering features, pricing, pros and cons, and real-world use cases. Discover whether Suped is the right email deliverability tool for your business. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/why-legacy-software-modernization-is-critical-for-data-security/
Compromised npm package silently installs OpenClaw on developer machines

Feb 21, 2026 5:01 AM

Tags: ai, attack, business, cybersecurity, detection, edr, malware, risk, supply-chain, tool, update

Update to the latest version: npm install “-g cline@latest.”If on version 2.3.0, update to 2.4.0 or higher.Check for and immediately remove OpenClaw if it hadn’t been intentionally installed (“npm uninstall -g openclaw”).Gooding noted, “nothing ran automatically beyond the install,” but added there was still a risk: “OpenClaw is a capable agentic tool with broad system…
Attackers Use New Tool to Scan for React2Shell Exposure

Feb 20, 2026 11:01 PM

Tags: network, threat, tool

Researchers say threat actors wielded the sophisticated, and unfortunately named, toolkit to target high-value networks for React2Shell exploitation. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-new-tool-scan-react2shell-exposure
NDSS 2025 NodeMedic-FINE: Automatic Detection And Exploit Synthesis For Node.js Vulnerabilities

Feb 20, 2026 10:01 PM

Tags: api, conference, detection, exploit, guide, injection, Internet, network, tool, vulnerability

Session 13A: JavaScript Security Authors, Creators & Presenters: Darion Cassel (Carnegie Mellon University), Nuno Sabino (IST & CMU), Min-Chien Hsu (Carnegie Mellon University), Ruben Martins (Carnegie Mellon University), Limin Jia (Carnegie Mellon University) PAPER NodeMedic-FINE: Automatic Detection and Exploit Synthesis for Node.js Vulnerabilities The Node.js ecosystem comprises millions of packages written in JavaScript. Many packages…
TDL 016 – Speed, Risk, and Responsibility in the Age of AI – Rafael Ramirez

Feb 20, 2026 9:02 PM

Tags: access, ai, antivirus, automation, awareness, business, ciso, cloud, control, country, cyber, data, defense, detection, dns, firewall, governance, government, hacker, ibm, incident response, intelligence, Internet, law, linkedin, login, mfa, microsoft, network, risk, saas, service, skills, software, startup, strategy, technology, threat, tool, training, update, vulnerability, windows, zero-trust

Summary In a recent episode of The Defenders Log, host David Redekop sat down with cyber security expert Rafael Ramirez to navigate the rapidly shifting landscape of AI security. As we move deeper into 2026, the duo explored how artificial intelligence has evolved from simple chatbots into powerful, autonomous “agentic” systems. The Double-Edged Sword of…