/
initial_access_vector:exploit_public_facing × victim_sectors:manufacturing × criticity:high × limpar

Resultados

6 casos · pág. 1/1

olhardigital.com.br · high

Chinese-speaking actor uses Cairn AI agents with DeepSeek and Claude Code to breach 100+ company websites for about $50 each

A Chinese-speaking threat actor used AI agents coordinated through the open-source Cairn platform to attempt intrusions against more than 1,200 websites, reportedly compromising sites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the activity while monitoring internet-exposed…

thehackernews.com · high

Chinese-speaking actor uses autonomous Cairn AI agents to attack 1,200+ websites and breach 100+ companies, incl. Deere and SharkNinja

A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…

theregister.com · high

Attackers increasingly target building automation and OT systems; French grocery refrigeration hack causes spoilage and fires

A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…

gbhackers.com · · 3 fontes · 3 atualizações high

APT28 (Swallowtail) breaches NATO naval shipbuilder, aircraft engine maker and law enforcement agency with HOOKEDGE backdoor and new ld.exe loader

Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…

gbhackers.com · · 3 fontes · 3 atualizações high

Lazarus Group's Operation FlashHole hits South Korean firms via INISAFE CrossWeb EX abuse, GitHub C2 and ML-KEM-1024 post-quantum payload delivery

Kaspersky's analysis of Operation FlashHole describes a Lazarus Group (North Korea-linked) cyberespionage campaign against South Korean organizations. It follows Operation SyncHole, which abused the related Cross EX product and hit at least six organizations (gbhackers.com), and is placed within the broader Cascade Hole activity. The earl…

cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…