/
initial_access_vector:exploit_public_facing × criticity:high × victim_sectors:software × limpar

Resultados

2 casos · pág. 1/1

wiz.io · high

Storm-0940 actor uses ARTEX AI pentest agent against IT and software vendors' identity providers and M365 integrations

Throughout October 2026, Wiz observed an actor using tooling associated with ARTEX, an open-source autonomous AI penetration-testing framework, against multiple IT and software vendors. The activity targeted identity providers (Okta, Entra ID, AWS Cognito) and Microsoft 365 integrations, with repeated attempts to bypass authentication, en…

Storm-0940 technology software
gbhackers.com · high

Lazarus Group's Operation FlashHole uses ML-KEM post-quantum key exchange in LPEClient against South Korean organizations

Lazarus Group, linked to North Korea, ran a cyberespionage campaign dubbed Operation FlashHole against South Korean organizations. The campaign combined spear-phishing, tailored websites, abuse of the financial security application INISAFE CrossWeb EX, and modular malware that ran largely in memory. It follows Operation SyncHole, which ab…

Lazarus Group software construction