ARTEX AI Agents Steal App-Signing Certificates
Check Point traced ARTEX agents stealing 300+ app-signing certificates. Only three passed…
CyberStrikeAI Directed Intruders From SQL Server to Domain Admin
A server-side AI helped attackers navigate educational networks, steal credentials and collect…
Railway Explains Why New API Keys Were Revoked
Railway says newer API keys entered a precautionary revocation list by mistake.…
LiteLLM 1.107.0 Stole Secrets at Python Startup
A leaked key led to LiteLLM 1.107.0’s poisoned release. See how Python…
Aokigahara Stealer Targets AI Sessions and Developer Keys
Aokigahara collects local AI sessions, Git and cloud credentials. What the October…
Tracebit Context Bombs Send AI Attackers Into Dead Ends
Tracebit tested deceptive documents and fake services against AI attackers. The AWS…
BUGSTER Used AI to Steal Thousands of University Records
Unit 42 links BUGSTER to a university database theft. The evidence separates…
Cairn AI Attacks: Open Panels Exposed Webshells and Secrets
NorForge found exposed Cairn attack dashboards, checked real webshells and uncovered secrets.…
Linux Spies Copied Sudo Passwords Before Running the Real Command
Unit 42 traces AI-assisted Linux espionage through a sudo password trap, PHP…
Claude Max Giveaway Fakes a Google Window to Steal Logins
A fake Claude Max gift draws its own Google sign-in window. See…
CLOSEDQUORUM: Windows Malware Puts Its Next Move to a Vote
Talos found a Windows implant designed to take votes from four AI…
Talking Tilly: The Camera Keeps Analysing After the Age Check
Talking Tilly requires an age selfie, analyses mood during calls and keeps…
