/
loss_type:operational × victim_sectors:defense × limpar

Resultados

6 casos · pág. 1/1

infosecurity-magazine.com · medium

BAE Systems cyber incident takes down US federal courts' Bankruptcy Noticing Center, halting nationwide bankruptcy notices

A cybersecurity incident at US government contractor BAE Systems has knocked out the systems behind the Bankruptcy Noticing Center (BNC), which generates and distributes bankruptcy notices for all federal bankruptcy courts in the US. The Administrative Office of the US Courts (AOUSC) confirmed on October 15 that BNC IT systems and website…

securityweek.com · medium

MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries

MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …

newsroom.trendmicro.com · medium

TrendAI H1 2026 APT roundup: nation-state actors use AI across the intrusion lifecycle, plus zero-days and OT attacks

TrendAI™ (Trend Micro) published its H1 2026 APT Activity Roundup on July 29, 2026. It finds nation-state actors used AI in more stages of the intrusion lifecycle than in any prior half-year the company has tracked. China-aligned actors used generative AI to refine exploits and iteratively build malware through "vibe coding", and one AI a…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…

securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…

darkreading.com · · 7 fontes · 7 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…