/
initial_access_vector:phishing × victim_sectors:hospitality × limpar

Resultados

3 casos · pág. 1/1

f5.com · low

F5 Labs warns AI chatbots and agents at the 2026 Winter Games face prompt injection and behavioral manipulation risks

F5 Labs argues that AI systems embedded in the operations of the 2026 Winter Games (spectator chatbots, scheduling, translation, fraud detection, operational analytics) create a behavioral attack surface that traditional security controls do not cover. The main risk is manipulated model behavior rather than outages or stolen credentials. …

thehackernews.com · exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

sentinelone.com · high

Weekly CTI roundup: Ryuk access broker sentenced, TraderTraitor FLATROOF/ROOFDECK macOS backdoors, AI-agent skimming of 600K cards

This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…