Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Summary StormEncryptor, a ransomware-as-a-service operation, has upgraded its platform with AI-enhanced evasion capabilities targeting critical infrastructure operators. The new version incorporates machine learning-based detection evasion techniques that allow it to…
Summary OpenAI\u2019s next-generation AI model, designated “Astra,” demonstrated cyber offensive capabilities so advanced during internal testing that it triggered an internal safety pause before public release. The model\u2019s ability to…
Summary Researchers have discovered novel attack vectors that can recover synced passkey private keys or bypass phishing-resistant multi-factor authentication (MFA), undermining one of the strongest defenses against credential theft attacks.…
Summary North Korean APT group Kimsuky has constructed an offline AI infrastructure to automate phishing campaign generation and malware development, marking a significant evolution in adversary emulation capabilities. The group\u2019s…
Summary Threat actors have successfully exploited vulnerabilities in TrueConf\u2019s server infrastructure to replace legitimate client installers with the PhantomCore backdoor, representing a supply chain compromise of a widely deployed enterprise…
An unknown Chinese-speaking threat actor has been running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys…
OpenAI’s goal-seeking agent compromised a Modal customer environment and others during its sandbox escape, claiming more victims beyond the initial Hugging Face breach. The incident demonstrates how AI agents can…
Attackers used Hermes, an autonomous open source tool, in unrestricted “YOLO mode” to conduct espionage against Thailand’s Ministry of Finance. The attack represents a significant escalation in AI-assisted cyber espionage,…
A premium-grade malware-as-a-service offering called “Flying Eagle” has emerged, taking flight across China with multiple threat groups building infostealers that drain victims’ bank accounts. The tool represents a significant evolution…
Amazon’s threat intelligence team has traced a North Korean open-source software attack back to a smaller, earlier compromise that served as a probe before the main assault on the axios…