AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

1 month ago

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution.…

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

1 month ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

1 month ago

Ryuk member Karen Vardanyan was sentenced to 24 months in U.S. prison after extradition from Ukraine and ordered to pay…

AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

1 month ago

MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within…

OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

1 month ago

OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation. An OpenAI…

CLOSEDQUORUM, the malware that asks four AI models what to do next

1 month ago

Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator…

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

1 month ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known…

F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

1 month ago

F5 warns of a critical BIG-IP APM zero-day, CVE-2026-94127, allowing remote code execution. Attackers are already exploiting it. F5 has…

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

1 month ago

ShinyHunters claims FBI breach via PeopleSoft zero-day, steals staff data; FBI investigating, no confirmation yet. The popular cybercrime group ShinyHunters…

EvilTokens made phishing-as-a-service look easy. Then it got taken down

1 month ago

Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI.…

This website uses cookies.