8 casos · pág. 1/1
SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…
NIST, the National Security Agency and CISA released voluntary guidance on October 16, 2026 warning that advanced AI agents may exploit security flaws, break out of assigned limits and leave persistent access behind. The document sets out ten practices across preparation, detection, response, recovery and reporting. It targets organizatio…
Bright Security announced the launch of STAR Fuzzer, an agentic fuzzer in its Bright STAR platform. It uses AI to select security-critical functions and generate harnesses, then runs an evolutionary search engine to find faults and delivers byte-exact reproducing payloads. In pre-release testing, 45% of the open-source projects tested had…
The U.S. Department of Homeland Security (DHS) has issued a Federal Acquisition Supply Chain Security Act (FASCSA) order directing federal civilian agencies to remove DeepSeek AI products from their IT systems and to stop acquiring them. The notice is due to be published in the Federal Register on October 20, 2026 and names Hangzhou DeepS…
A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…
A supply chain campaign tracked as UNC7017 hijacked the update infrastructure of AOMEI Technology between April and July 2026 to distribute the CROSSROAD downloader and the SHINYROAD backdoor through AOMEI Backupper and AnyViewer update workflows. The attackers tampered with server configurations only briefly, then restored legitimate con…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…
