/
ttps_attack:T1078 × threat_actors:Inc × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · exploit público critical

Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

SOCRadar researchers analyzed an exposed directory at 45.227.254.43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and …

CVE-2024-57727 CVE-2026-35616 CVE-2026-41940 INC The Gentlemen industrial manufacturing
theregister.com · · 4 fontes · 4 atualizações critical

Ransomware groups Qilin, INC and Settra exploit PAN-OS GlobalProtect auth bypass CVE-2026-0257, pivoting to vCenter/ESXi

Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…

CVE-2026-0257 CVE-2023-27532 Qilin Spikey Scorpius professional services legal services