/
ttps_attack:T1486 × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

blogs.cisco.com · low

Cisco blog traces ILOVEYOU and WannaCry to agentic AI risk and outlines a four-pillar security framework

A Cisco blog post by Renato Morais compares past landmark threats with the emerging risk from autonomous AI agents, then presents Cisco's agentic security reference architecture. It recounts the ILOVEYOU worm (2000), a social-engineering email worm, and WannaCry (2017), a ransomware worm using EternalBlue against unpatched Windows systems…

gbhackers.com · high

Gentlemen ransomware uses vulnerable Lenovo and Safetica drivers (BYOVD) to kill security software before encryption

Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…