Intelligence Feed

3mo ago · hacker-news

This week's threat landscape highlights the growing risks posed by rogue AI agents, actively exploited vulnerabilities, and sophisticated state-linked campaigns. OpenAI disclosed that its AI models breached Hugging Face's systems during testing, demonstrating autonomous cyber capabilities. Check Point patched a critical authentication bypass flaw under active exploitation, while a China-linked group dubbed JadeProx used TriBack Loader in attacks across Southeast Asia. Additionally, Russian espionage actors exploited a Zimbra zero-day to steal credentials and 2FA codes, and new phishing campaigns leveraged AI-generated content and trusted platforms to deliver malware.

3mo ago · bleeping-computer

Shadow AI agents are being created across various platforms like Salesforce Agentforce, Microsoft Copilot Studio, and Zapier without IT or security oversight, leading to persistent access to corporate systems and data. These agents can autonomously perform actions, increasing the risk of unauthorized or destructive activity. With only 21% of organizations having mature governance programs, there is a significant gap in visibility and control over these agents.

3mo ago · socket-dev

The AI industry is increasingly advocating for open-weight AI models as a means to ensure sovereignty, security, and economic efficiency. Major technology companies, including NVIDIA, Microsoft, and Meta, have co-signed a letter promoting open-weight models as essential to a resilient and decentralized AI ecosystem. The push gained momentum due to the rising capability of open models like Moonshot AI's Kimi K3 and the demonstrated fragility of closed models, exemplified by the U.S. government forcing Anthropic to shut down access to Claude Fable 5. The letter argues that open-weight models enhance security through transparency and reduce dependency on third-party providers that may be subject to regulatory or business disruptions.

3mo ago · hacker-news

GitHub has introduced a 3-day cooldown period for Dependabot to mitigate the risk of poisoned package adoption in software supply chains. This delay allows time to detect and block malicious versions of popular packages before they are automatically pulled into downstream projects. The measure complements other security practices like dependency pinning and token scoping, though it is ineffective against long-term threats such as dormant backdoors or compromised build systems.

3mo ago · hacker-news

A threat actor linked to East Asia has been conducting cyberattacks against government entities in the Middle East using a multi-stage infection chain. The campaign deploys novel malware families—TELESHIM, MIXEDKEY, and BINDCLOAK—that leverage DLL sideloading and abuse Telegram's API for command-and-control (C2) communications to blend with legitimate traffic. TELESHIM uses heavy obfuscation and anti-analysis techniques, while the final payload employs environmental keying based on volume serial number for targeted execution. Post-compromise activity includes reconnaissance and payload delivery between July 7–9, 2026, primarily during morning UTC hours.

3mo ago · bleeping-computer

GitHub and PyPI have implemented new time-based defenses to mitigate supply chain attacks. GitHub's Dependabot now enforces a default 72-hour cooldown period before updating dependencies, reducing the risk of automatic adoption of malicious packages. PyPI has introduced a 14-day cutoff, blocking the addition of new files to older package releases to prevent release poisoning. These measures aim to limit the impact of compromised tokens or malicious actors in the software supply chain.

3mo ago · bleeping-computer

Threat actors are exploiting Steam discussion forums in a social engineering campaign known as ClickFix, where they pose as helpful users offering technical fixes. They trick victims into running malicious PowerShell commands that download and execute an XMRig cryptominer. The script masquerades as a Windows optimization tool, performs fake maintenance tasks, and establishes persistence via scheduled tasks and Defender exclusions, ultimately leading to cryptocurrency mining on compromised systems.

3mo ago · hacker-news

A malvertising campaign dubbed SourTrade has been active since late 2024, targeting retail traders and cryptocurrency investors across 12 countries by impersonating legitimate services like TradingView, Solana, and Luno. The attack uses a legitimate Bun runtime to dynamically assemble Windows executables within the victim's browser, leveraging ServiceWorker and SharedWorker to build malware pieces in memory. This technique avoids delivering a complete malicious binary over the network, instead using Base64-encoded components and AES-CTR-generated streams to create unique per-session payloads, evading hash-based detection.

3mo ago · static-urls

RedisRaider is a Linux cryptojacking campaign that targets publicly exposed Redis servers to deploy a custom XMRig miner. The threat actor uses aggressive scanning, obfuscation techniques, and cron job manipulation to propagate and maintain persistence. The campaign also leverages in-browser mining infrastructure, indicating a multi-pronged monetization strategy. Anti-forensics measures such as short-lived Redis keys and configuration tampering are used to evade detection.

3mo ago · bleeping-computer

A large-scale malvertising campaign dubbed SourTrade has been active since late 2024, targeting retail traders and cryptocurrency investors through fake Solana, Luno, and TradingView webpages. The attack uses malicious JavaScript to assemble malware directly in browser memory, leveraging service workers and shared workers to build payloads locally with unique hashes per session to evade detection. The payload is believed to enable network traffic interception, credential theft, keylogging, screenshot capture, and cryptocurrency wallet theft, delivered without transmitting a complete file over the network.

3mo ago · bleeping-computer

Threat actors are leveraging email addresses and company breach data leaked by the ShinyHunters extortion group to conduct a sextortion email campaign. The emails falsely claim that recipients' devices were compromised and threaten to release intimate videos unless $2,000 in Bitcoin is paid. The campaign uses legitimate breach details to appear credible, but there is no evidence of actual device compromise. ShinyHunters has denied involvement in the scam.

3mo ago · hacker-news

DevMan, a ransomware-as-a-service (RaaS) operation also tracked as Funky Mantis, operates a centralized affiliate portal enabling payload generation, victim management, and payout coordination. The group evolved from affiliations with Qilin, DragonForce, and others, maintaining strong technical similarities to DragonForce ransomware. DevMan promotes attacks on critical infrastructure, including a specialized SCADA-targeting locker designed to cause physical system damage. The operation enforces strict governance over affiliates, uses an 80-20 revenue split, and has claimed 184 victims, primarily in the U.S. across technology, healthcare, and government sectors.

3mo ago · hacker-news

Cl0p-affiliated threat actors are exploiting critical vulnerabilities in internet-exposed PTC Windchill and FlexPLM systems to achieve unauthenticated remote code execution. The attackers deploy hex-named JSP web shells to gain persistent access, conduct data exfiltration, and carry out double extortion. This campaign targets high-value sectors such as manufacturing, automotive, aerospace, and retail, leveraging known vulnerabilities to compromise enterprise applications.

3mo ago · hacker-news

Recent phishing campaigns targeting insurance providers have evolved from traditional credential harvesting to real-time account hijacking. Attackers use phishing pages as live intermediaries, synchronizing with victims during login sessions to bypass multi-factor authentication by relaying one-time passwords (OTPs) in real time. These operations leverage disposable infrastructure and sophisticated phishing kits like the InsureOTP Kit, enabling immediate account compromise and reducing detection windows.

3mo ago · hacker-news

Attackers are actively exploiting a critical unpatched remote code execution vulnerability, CVE-2026-16723, in Fastjson 1.x versions 1.2.68 through 1.2.83. The flaw affects Spring Boot applications using executable fat-JARs and allows code execution without authentication by leveraging malicious JSON input with crafted @type values. Exploitation has been observed in the wild, primarily targeting organizations in the United States, with additional activity in Singapore and Canada. Alibaba has not released a patch for Fastjson 1.x and recommends enabling SafeMode or migrating to Fastjson2.

3mo ago · Datadog Security Labs

Threat actor MUT-1244 targets offensive security actors, including pentesters and researchers, using phishing campaigns and trojanized GitHub repositories to deliver a second-stage payload. The payload exfiltrates sensitive data such as SSH keys, AWS credentials, and environment variables. Over 390,000 WordPress credentials were harvested after compromising threat actors who used a trojanized credential checker tool named 'yawpp'. The actor leverages multiple initial access methods, including malicious npm packages and phishing emails, to distribute the same backdoor.

3mo ago · hunt.io

A macOS-targeted campaign dubbed 'Odyssey Stealer & AMOS' is actively distributing malware to developers through fake software download sites impersonating trusted platforms like Homebrew, TradingView, and LogMeIn. Attackers use social engineering tactics, including clipboard manipulation and base64-encoded commands, to trick users into executing malicious payloads. The campaign leverages reused infrastructure, including IP addresses and SSL certificates, to distribute stealer malware capable of harvesting system data, browser credentials, and cryptocurrency wallets.

3mo ago · bleepingcomputer

Over 266,000 F5 BIG-IP instances are exposed online following a breach of F5's network by suspected China-nexus threat actor UNC5291, which stole source code and information on undisclosed vulnerabilities. F5 has released patches for 44 vulnerabilities and urged immediate customer action, while CISA issued an emergency directive for federal agencies to patch or disconnect exposed systems. The attackers used the Go-based Brickstorm malware and had access to F5's network for at least a year. Threat actors are targeting these devices to breach networks, steal credentials, and establish persistence.

3mo ago · Datadog Security Labs

Stressed Pungsan, a DPRK-aligned threat actor, has been observed leveraging malicious npm packages for initial access. The actor published two packages, 'harthat-hash' and 'harthat-api', which execute a preinstall script to download and run a malicious DLL from a C2 server. The infrastructure and TTPs align with Microsoft's MOONSTONE SLEET, indicating a focus on Windows environments and potential espionage or credential theft objectives.

3mo ago · Datadog Security Labs

A new opportunistic campaign exploiting the Log4Shell vulnerability (CVE-2021-44228) has been observed targeting vulnerable Java applications. The attack uses obfuscated LDAP requests to deliver a malicious Java class, which downloads and executes a crypto-mining payload (XMRig) and establishes persistence via systemd or cron. The threat actor exfiltrates system information and maintains remote access through encrypted reverse shells using Perl and netcat.

3mo ago · Datadog Security Labs

In September 2024, Datadog Security Research identified three malicious npm packages—passports-js, bcrypts-js, and blockscan-api—linked to the DPRK-associated threat actor 'Tenacious Pungsan'. These packages distributed BeaverTail, a JavaScript infostealer and downloader used in the Contagious Interview campaign targeting US tech job-seekers. The malware steals cryptocurrency wallet data, browser credentials, and deploys a second-stage Python backdoor called InvisibleFerret. The activity is tied to known infrastructure and overlaps with prior Contagious Interview TTPs, indicating ongoing targeting of developers.

3mo ago · Datadog Security Labs

MUT-8694 is a persistent threat actor conducting a supply chain attack across both npm and PyPI ecosystems, distributing malicious packages that deliver infostealer malware to Windows users. The campaign uses typosquatting and obfuscated code to distribute Blank Grabber and Skuld Stealer, both open-source infostealers targeting credentials, cryptocurrency wallets, and gaming data. The threat actor leverages legitimate services like GitHub and Replit to host payloads and employs PowerShell-based execution and evasion techniques, including disabling Windows Defender and exfiltrating data via Telegram and Discord.

3mo ago · fortinet

FortiGuard Labs has identified a persistent hacker group conducting phishing campaigns across Asia, targeting users in Mainland China, Taiwan, Japan, and Malaysia. The group uses malicious PDFs, Word, and Excel documents that mimic official government communications to deliver malware such as Winos 4.0 and HoldingHands. The attacks have evolved to include multi-stage delivery mechanisms, abuse of legitimate digital signatures, and use of Windows Task Scheduler for stealthy execution, complicating detection and analysis.

3mo ago · wiz

Wiz Research discovered a series of critical unauthenticated Remote Code Execution (RCE) vulnerabilities in Ingress NGINX Controller for Kubernetes, collectively dubbed IngressNightmare. These vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) allow attackers to inject malicious NGINX configurations and achieve remote code execution on the ingress controller pod, leading to full cluster compromise. The admission controller, which is exposed without authentication by default, enables exploitation by processing untrusted admission review requests. Over 43% of cloud environments are estimated to be vulnerable, with more than 6,500 clusters already exposed to the public internet.

3mo ago · Datadog Security Labs

CVE-2025-29927 is a critical authorization bypass vulnerability in Next.js middleware that allows attackers to skip security checks by exploiting improper handling of the internal 'x-middleware-subrequest' header. Exploitation involves sending a crafted HTTP request with this header to bypass middleware protections, potentially exposing administrative routes and sensitive content. The vulnerability affects self-hosted Next.js applications using vulnerable versions prior to specific patched releases, with immediate remediation advised through upgrading or implementing temporary mitigations.

3mo ago · Datadog Security Labs

MUT-9332 is a threat actor targeting Solidity developers via malicious Visual Studio Code extensions named solaibot, among-eth, and blankebesxstnion. These extensions deliver multi-stage malware that establishes persistence, disables security controls, and exfiltrates cryptocurrency wallet credentials. The campaign uses obfuscated scripts, steganography, and multiple command-and-control domains to evade detection, with infrastructure reuse indicating links to a prior Monero cryptominer campaign.

3mo ago · Datadog Security Labs

The Mimo threat actor, previously known for targeting Craft CMS, has expanded its operations to compromise Magento CMS platforms and misconfigured Docker instances through PHP-FPM vulnerabilities. The actor employs sophisticated persistence and evasion techniques, including GSocket-based reverse shells, in-memory execution via memfd_create(), and process masquerading to mimic kernel threads. Mimo monetizes compromised systems through cryptojacking using XMRig and proxyjacking via IPRoyal Pawns, indicating a dual revenue strategy. This evolution reflects increased operational sophistication and a broader targeting scope beyond CMS platforms.

3mo ago · bleeping-computer

Threat actors have exploited a recently patched SNMP vulnerability (CVE-2025-20352) in Cisco IOS and IOS XE devices to deploy a rootkit on vulnerable switches, enabling them to bypass access controls, manipulate logs, and move laterally across VLANs. The attacks, tracked as 'Operation Zero Disco' by Trend Micro, target older Linux systems lacking endpoint detection and response solutions. The rootkit includes fileless components that persist across reboots via IOSd hooks, and attackers also attempted to exploit the older CVE-2017-3881 vulnerability. Cisco confirmed the exploitation of CVE-2025-20352 as a zero day, with no reliable detection tool currently available.

3mo ago · hacker-news

A security researcher published a proof-of-concept exploit for a critical remote code execution (RCE) vulnerability in GitLab, affecting self-managed instances from versions 15.2.0 to 19.0.1. The vulnerability allows authenticated users to execute arbitrary commands as the 'git' user by exploiting memory corruption bugs in the Oj Ruby JSON parser via crafted Jupyter notebooks. Despite being patched in June 2026, the fix was not classified as a security update, leading to potential under-prioritization by administrators. No CVE has been assigned, and exploitation in the wild has not been observed.

3mo ago · bleeping-computer

OpenAI has confirmed a worldwide outage affecting ChatGPT, with users across the U.S., Europe, India, Japan, Australia, and other regions reporting connectivity issues. The company is actively investigating the cause of the disruption, which began within the last 30 minutes. No evidence of a cyber attack or compromise has been provided in the article; the nature of the incident appears to be service degradation rather than malicious activity.