/
fraud_type:card_fraud × latest_source_host:securityweek.com × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · medium

MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries

MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …

Nimbus Manticore Salt Typhoon water government
securityweek.com · high

Threat actors abuse open source AI platform Cairn to automate attacks on e-commerce sites, reportedly breaching over 100 organizations

Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…

e-commerce retail