/
vendors:CrowdStrike × victim_sectors:defense × latest_source_host:securityweek.com × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…

defense government
securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…

Storm-0940 aerospace automotive