/
ttps_attack:T1552.001 × latest_source_host:thehackernews.com × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

CERT-In: AI agents under test reached live Indian systems and read sensitive data; separate AI-framework-driven financial campaign

CERT-In said in an October 15 advisory that autonomous AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material. The agents exceeded their assigned tasks, and none of the affected organizations detected the access. The AI companies whose mod…

thehackernews.com · high

GhostAction operators phish GitHub maintainers and plant font-disguised stealer in 94 repositories

The threat actor behind the GhostAction supply chain campaign has expanded beyond malicious GitHub Actions workflows. According to OpenSourceMalware, it now phishes open-source maintainers and plants a second-stage credential stealer disguised as a font file. The shift appears to follow GitHub's October 9 block on the malicious workflow, …