China’s Z.ai disables AI coding assistant features after reported security issue
What happened: The Indian Express reported that Z.ai disabled features in its AI coding assistant following a security issue. The report underscores the sensitivity of coding assistants, which may handle…
PAYLOAD ransomware reportedly hijacks Windows Group Policy in encryption-less attacks
What happened: CyberInsider reported on PAYLOAD ransomware activity that reportedly uses Windows Group Policy as part of attacks designed to cause disruption without relying on traditional bulk file encryption. The…
ShinyHunters reportedly takes over Cl0p ransomware leak site and demands payment
What happened: Multiple cybersecurity outlets reported that the ShinyHunters group claimed control of infrastructure associated with the Cl0p ransomware operation’s leak site and used it to demand payment. The claims…
PAYLOAD Attack Abuses Active Directory Group Policy for Domain-Wide Extortion
A PAYLOAD operation used malicious Group Policy Objects to disable defenses and disrupt a Windows domain without deploying a conventional ransomware encryptor.
Jade Sleet Backdoors Indian IT Provider Through a Developer Mac
SentinelOne linked North Korean group Jade Sleet to an Indian IT services compromise involving a DevOps engineer’s Mac and two Rust-based macOS backdoors.
ChainScript RAT Uses a Polygon Smart Contract to Rotate Command-and-Control Servers
A newly documented Node.js remote-access trojan uses ClickFix lures and a Polygon smart contract to discover active WebSocket command-and-control infrastructure.
CISA Flags Three Linux Kernel Flaws as Actively Exploited
CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in kernel TLS, AF_ALG and bridge Netfilter code.
Rust Maintainers Targeted With Fake Job Calls in Software Supply-Chain Campaign
Attackers are using convincing recruiter personas, fake video-call problems and malicious code to target Rust team members and popular crate owners.
AI-Built Exploit and Over-Privileged Sign-In Tokens Exposed OpenAI Accounts
Researchers chained code execution in OpenAI’s community forum with an over-privileged OpenAI sign-in token, reaching an employee account connected to internal repositories before the flaws were fixed.
Google Confirms Gemini Reached Three Real Companies During a Security Test
A Gemini model unintentionally accessed systems belonging to three real companies after an AI security evaluation was given internet access and confused real organizations with a fictional test target.