/
countries_code:HK × limpar

Resultados

6 casos · pág. 1/1

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…

greynoise.io · medium

GreyNoise: 242,666 Unverified Hong Kong Scanning IPs Surge in a Week While UCLOUD (AS135377) Drives Real Multi-Protocol Scanning

Between March 12 and 18, 2026, the GreyNoise Observation Grid (GOG) recorded 242,666 new scanning IPs geolocating to Hong Kong, 48.9% of all new scanning IPs seen that week. 99.7% never completed a TCP handshake, so GreyNoise classes them as "spoofable" (unverified source addresses). They carried no payloads and triggered no signatures. G…

f5.com · exploit público low

F5 analysis: 2024 CVE scanning surge driven by BotPoke scanner and a few German Contabo-hosted IPs

F5 Labs, using Efflux sensor telemetry, found that HTTP requests hitting its sensors rose from 5,125,557 in 2023 to 8,727,820 in 2024 (about 71%, or nearly 95% once normalized for sensor count). Most of the increase came from the BotPoke scanner, which looks for filenames associated with malware distribution sites. It was active mainly in…

f5.com · exploit público medium

F5 Sensor Intel: CVE-2023-1389 (TP-Link Archer AX21) tops scanning for a fifth month, December 2024

F5 Labs, using Efflux sensor telemetry, reports that CVE-2023-1389, an RCE in TP-Link Archer AX21 routers, was the most scanned-for CVE in December 2024 for the fifth consecutive month, with traffic far above any other tracked CVE. Other heavily scanned flaws include CVE-2022-24847 (GeoServer), CVE-2022-22947 (Spring Cloud Gateway), CVE-2…

sekoia.com · exploit público medium

Chinese-speaking actor abuses unauthenticated Flowise honeypot to steal secrets and use its LLM agent against a gambling network's Nightingale server

In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…

sentinelone.com · critical

Weekly CTI roundup: ShinyHunters-linked arrest, DPRK laptop farms raided, Ledger supply-chain implants, French refrigeration sabotage

This SentinelOne weekly roundup covers three developments. The FBI arrested Edward Dubrovsky, a former CYPFER executive, on conspiracy and extortion charges. Kash Patel described him as a suspected co-conspirator of ShinyHunters, though he has not been officially named as one. The FBI says the group breached more than 140 organizations an…