/
countries_code:US × victim_sectors:defense × criticity:medium × latest_source_host:securityweek.com × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…

securityweek.com · medium

MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries

MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …