/
countries_code:HK × criticity:medium × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…

defense government
gbhackers.com · · 2 fontes · 2 atualizações exploit público medium

Chinese-speaking actor abuses Flowise honeypot to harvest secrets and use its LLM agent for recon against a gambling network's Nightingale server

In late August 2026, Sekoia TDR observed an attacker interact with an unauthenticated Flowise honeypot emulating v2.2.8. The attacker enumerated chatflows and stored credentials, created a rogue "System Status" chatflow with a callback to attacker infrastructure (154.217.251.226), and used prompt injection to turn the LLM agent into an of…

CVE-2025-59528 CVE-2026-41264 CVE-2024-31621 gambling ai_platforms