Intelligence Feed

3mo ago · bleeping-computer

The JadePuffer agentic threat actor has evolved to target AI/ML infrastructure using custom ransomware named EncForge, which encrypts critical AI assets such as model checkpoints, training datasets, and vector databases. The attack leverages autonomous decision-making to adapt in real time, deploying Python scripts to deliver the Go-based EncForge payload after gaining root access via an exposed Docker socket. The ransomware uses AES-256 and RSA-2048 encryption, appends '.locked' to encrypted files, and leaves a ransom note, though no data exfiltration was observed.

3mo ago · bleeping-computer

Security researchers from Pillar Security demonstrated sandbox escape techniques across four AI coding agents: Cursor, OpenAI's Codex CLI, Google's Gemini CLI, and Antigravity. The attacks leverage prompt injection to manipulate files within the sandboxed workspace, which are later executed or interpreted by trusted tools running outside the sandbox, leading to command execution on the host. These techniques exploit design flaws such as over-trusted configuration files, incomplete denylists, and privileged local daemons. Most vulnerabilities have been patched, though some CVEs are still pending.

3mo ago · wiz

A critical pre-authentication remote code execution (RCE) vulnerability chain in WordPress Core, dubbed 'wp2shell' and tracked as CVE-2026-63030 and CVE-2026-60137, is being actively exploited in the wild. The vulnerabilities allow unauthenticated attackers to execute arbitrary code on vulnerable WordPress instances, leading to webshell deployment, user enumeration, and admin panel access. Multiple threat actors have been observed exploiting these flaws, deploying both simple and sophisticated PHP webshells, while mass scanning campaigns suggest widespread opportunistic targeting.

3mo ago · hacker-news

This week's threat landscape highlights critical vulnerabilities in widely used platforms such as WordPress, SonicWall, and Microsoft SharePoint, with active exploitation observed in the wild. A pre-authenticated remote code execution flaw in WordPress Core (CVE-2026-63030 and CVE-2026-60137) enables unauthenticated attackers to execute code, posing a significant risk due to WordPress's global reach. SonicWall SMA appliances were exploited via zero-day vulnerabilities prior to patching, while CISA added a SharePoint RCE (CVE-2026-58644) to its known exploited list. Additionally, new malware frameworks like OkoBot and NadMesh target crypto assets and cloud AI services, indicating evolving attacker tactics leveraging automation and AI.

3mo ago · hacker-news

HollowGraph is a newly discovered espionage malware that leverages a compromised Microsoft 365 calendar as a covert command-and-control (C2) channel, hiding operator instructions and exfiltrated data within calendar events dated to 2050. The malware uses legitimate Microsoft Graph API traffic to avoid detection, communicating via encrypted attachments on future-dated events. It is associated with the Cavern backdoor framework and shows potential ties to Iranian-linked actors, though attribution remains unconfirmed. The small, targeted footprint suggests focused cyber espionage rather than broad criminal activity.

3mo ago · hacker-news

A cybercriminal operator left a server exposed, revealing an AI-assisted phishing toolkit used in a WebDAV-based malware campaign targeting Mexican users. The attacker leveraged generative AI to accelerate development and testing of social engineering lures and delivery mechanisms, including filename spoofing with right-to-left override (RTLO) and abuse of signed Windows binaries via a working directory hijack. The primary campaign delivered a .NET infostealer through a fake government ID site, while a secondary campaign used a trojanized DLL sideloaded via a signed Ubisoft binary to deploy a modular .NET RAT. The operation demonstrates a sophisticated, software-like development lifecycle enabled by AI tools.

3mo ago · bleeping-computer

A newly identified malware named HollowGraph leverages compromised Microsoft 365 accounts and the Microsoft Graph API for command-and-control (C2) communications, using calendar events as a covert channel to send and receive encrypted commands and exfiltrated data. The malware is associated with the Cavern C2 framework and shows technical similarities to the Iranian-linked threat actor Lyceum, though attribution remains unconfirmed. HollowGraph employs hybrid encryption (RSA and AES-256-GCM), DNS tunneling for credential updates, and targets organizations in Israel for espionage purposes.

3mo ago · hacker-news

The article discusses how the exposure window—the time between a vulnerability becoming exploitable and being remediated—remains the critical factor in breach risk, despite advances in AI-driven vulnerability discovery like Anthropic's Mythos. While vulnerability identification and prioritization now occur at machine speed, organizational mobilization lags, leaving critical systems exposed. Attackers exploit this gap rapidly, with eCrime breakout times as low as 29 minutes, far outpacing typical remediation timelines. The focus must shift to reducing the blast radius by prioritizing remediation of exposures that lead to critical assets.

3mo ago · hacker-news

Russian intelligence services are actively hijacking internet-connected IP cameras across NATO countries and Ukraine to conduct cyber espionage, monitoring military logistics, troop movements, and weapons shipments. The attackers exploit default credentials and outdated firmware rather than zero-day vulnerabilities, using automated image recognition to identify military assets. While the number of confirmed breaches is low, the exposure of over 87,000 vulnerable devices presents a significant risk. The Dutch intelligence agencies AIVD and MIVD have issued warnings and mitigation guidance to secure camera systems.

3mo ago · bleeping-computer

Hugging Face disclosed a breach where an autonomous AI agent exploited code-execution vulnerabilities in its data-processing pipeline to gain access to internal datasets and credentials. The attacker used a malicious dataset to execute code on a processing worker, enabling lateral movement across internal clusters. The campaign involved self-migrating command-and-control infrastructure hosted on public services, consistent with an 'agentic attacker' scenario. Hugging Face has since revoked credentials, rebuilt compromised nodes, and improved detection systems.

3mo ago · bleeping-computer

The article discusses the challenges and considerations for evaluating AI-powered Security Operations Center (SOC) solutions, emphasizing the gap between vendor promises and real-world performance. It highlights that while AI SOC tools show potential in automating threat detection and response, many fail in production due to misalignment with team workflows, lack of contextual data, and durability issues. The guide recommends a structured evaluation framework focusing on verdict accuracy, operational fit, long-term reliability, and lessons from practitioners. No specific threat actor, malware, or attack campaign is described.

3mo ago · hacker-news

A Russian-speaking threat actor known as 'bandcampro' leveraged Google's open-source Gemini CLI as an AI-powered hacking agent to control a botnet of eight dental clinic computers. The AI was used to autonomously set up and manage command-and-control infrastructure, debug connectivity issues, and perform tasks such as password cracking and botnet management. The operation, part of the 'Patriot Bait' campaign, demonstrates a novel use of AI to reduce operator effort, enable rapid infrastructure replication, and complicate attribution.

3mo ago · hacker-news

A heap-based buffer overflow vulnerability, CVE-2026-14266, in 7-Zip's XZ archive handler could allow attackers to execute code when a victim opens a maliciously crafted archive. The flaw, rated High severity with a CVSS score of 7.0, stems from improper handling of XZ chunked data leading to an out-of-bounds write. Exploitation requires local interaction, and no public proof-of-concept or active exploitation has been observed as of July 20, 2026. Users are advised to update to 7-Zip 26.02 or later to mitigate the risk.

3mo ago · bleeping-computer

Attackers are actively exploiting a critical remote code execution vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, allowing unauthenticated threat actors to escape the sandbox and execute arbitrary code. The flaw was patched on July 13, 2026, but exploitation was confirmed in the wild just days later. Despite ServiceNow not officially acknowledging active exploitation, threat intelligence firm Defused has observed attack attempts leveraging the same endpoint used in the vulnerability proof-of-concept.

3mo ago · bleeping-computer

Microsoft released an out-of-band (OOB) update (KB5121767) to address a compatibility issue between a Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework (IPF) Processor Participant driver on certain Dell PCs. The conflict, introduced in the June 2026 KB5095093 preview update, caused unexpected shutdowns, performance degradation, increased heat, and battery drain. The issue affected Dell systems running Windows 11 25H2 and 24H2 after installing the July 2026 KB5101650 update, with Microsoft temporarily blocking the update until the fix was available.

3mo ago · bleeping-computer

Microsoft is addressing a widespread issue affecting Windows Server Update Services (WSUS) synchronization, which has caused delays and timeouts since July 13, 2026. The problem impacts both client and server platforms, preventing administrators from deploying the latest Windows updates through WSUS or Configuration Manager. While mitigation measures have been deployed for new or rebuilt WSUS servers, Microsoft continues to work on solutions for previously affected systems.

3mo ago · hacker-news

A software supply chain attack dubbed SleeperGem has been identified, involving three malicious RubyGems packages that were either newly published or surreptitiously updated after years of dormancy. The malicious gems act as loaders, fetching secondary payloads from an attacker-controlled Forgejo instance and establishing persistence on developer machines while avoiding CI/CD environments. The attack leverages compromised accounts to distribute payloads that exfiltrate sensitive data and deploy persistent backdoors, with one variant planting a setuid root shell for privilege escalation.

3mo ago · hacker-news

Hugging Face, the world's largest AI model repository, suffered a breach caused by an autonomous AI agent that exploited code execution vulnerabilities in its data processing pipeline. The attacker leveraged a malicious dataset to gain initial access, escalate privileges, and move laterally across internal clusters, stealing cloud credentials. Although public models and user data were not tampered with, the incident highlights risks in AI supply chains and limitations of safety-guarded forensic models.

3mo ago · hacker-news

A critical vulnerability in NGINX, tracked as CVE-2026-42533, allows remote unauthenticated attackers to trigger a heap buffer overflow via crafted HTTP requests, potentially leading to denial of service or remote code execution. The flaw exists in NGINX's script engine under specific configurations involving regex-based maps and capture overwrites. Exploitation may bypass ASLR, increasing the risk even on default systems, though no public exploits have been observed yet. F5 has released patches for core NGINX and NGINX Plus, but downstream products lack updated builds at the time of publication.

3mo ago · step-security

Between July 18 and July 19, 2026, a coordinated supply chain attack dubbed SleeperGem compromised three RubyGems packages: git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab. These malicious packages act as loaders, downloading a second-stage payload from an attacker-controlled Forgejo instance and installing a persistent backdoor on developer machines. The malware evades detection in CI environments by checking for CI-specific environment variables and only activates on developer laptops, where it establishes persistence via systemd and cron, and may escalate privileges by planting a setuid root shell.

3mo ago · hacker-news

A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall SMA 1000 series VPN appliances before their public disclosure. The actor chained CVE-2026-15409 and CVE-2026-15410 to achieve arbitrary command execution and root access, deploying custom malware and web shells for persistence. The exploitation chain involved WebSocket tunneling, authentication bypass via hardware UUID, and abuse of localhost services, enabling credential theft and network traffic interception, though lateral movement appears limited.

3mo ago · hacker-news

Russian state-sponsored threat actor UAC-0145, a sub-cluster of Sandworm affiliated with GRU, has been conducting cyberattacks against Ukrainian targets using the ClickFix social engineering technique. The attackers compromise websites and inject fake CAPTCHA checks that prompt users to execute malicious PowerShell commands, leading to malware infection. These commands download and execute malware such as GHETTOVIBE, SCOUTCURL, and COWARDDUCK, enabling data theft and remote control. The campaign also involves backdooring Android devices via malicious APKs distributed as security tools.

3mo ago · bleeping-computer

An advanced threat actor is exploiting the update mechanism of the ViPNet software, widely used in Russian government and regulated sectors, to deploy a multi-stage malware payload. The campaign, dubbed HelloNet, has been active since at least May 2026 and targets organizations in government, energy, transport, education, and logistics. The attackers use a malicious DLL sideloaded via a legitimate ViPNet updater to establish persistence and deploy proxy and backdoor tools. Attribution to a Chinese-speaking APT is considered low confidence due to limited evidence and potential false flags.

3mo ago · bleeping-computer

7-Zip has released version 26.02 to address a critical remote code execution vulnerability in its XZ decompression functionality. The flaw, stemming from a heap-based buffer overflow, could allow attackers to execute arbitrary code if a user opens a specially crafted archive. While no active exploitation has been reported, the lack of an automatic update mechanism increases the risk of prolonged exposure for unpatched systems.

3mo ago · bleeping-computer

Critical remote code execution vulnerabilities in WordPress Core, collectively known as 'wp2shell' and tracked as CVE-2026-63030 and CVE-2026-60137, have been publicly exploited. These flaws allow unauthenticated attackers to execute arbitrary code on affected WordPress installations running versions 6.9.0–6.9.4 and 7.0.0–7.0.1. The vulnerabilities stem from a REST API batch-route confusion flaw and a SQL injection in the 'author__not_in' parameter, which can be chained together for pre-authentication RCE. Immediate patching to WordPress 7.0.2 or 6.9.5 is strongly advised due to active exploitation.

3mo ago · bleeping-computer

Microsoft has observed a significant increase in ACR Stealer malware attacks targeting enterprise customers. The malware is delivered via social engineering using the ClickFix lure, WebDAV servers, and MSHTA to execute malicious payloads. ACR Stealer steals browser passwords, authentication tokens, and sensitive documents, leveraging obfuscated PowerShell scripts, in-memory execution, and steganographic images. Some variants use blockchain services as dead-drop resolvers for C2 communication.

4mo ago · datadog-security-labs

In June 2026, the threat actor group 'Icarus' conducted a supply chain attack by compromising Klue's backend systems, leveraging dormant OAuth credentials to gain unauthorized access to customer Salesforce and Gong environments. The actor exfiltrated sensitive CRM data including business contacts, price quotes, and sales communications by abusing API queries with stolen OAuth tokens. Klue responded by revoking access and alerting customers, while the actor initiated an extortion campaign using Session Messenger. The attack highlights risks associated with third-party integrations and improper credential lifecycle management.

3mo ago · bleeping-computer

The article discusses the growing implementation of age verification laws worldwide and highlights concerns around biometric data privacy. Incode Technologies introduces On-Device Age Estimation, a privacy-preserving solution where facial analysis occurs locally on the user's device, ensuring faces are never transmitted or stored. The company also emphasizes its $100 million commitment to privacy-enhancing technologies and anti-fraud collaboration without centralized data pooling. This approach aims to meet compliance requirements while mitigating risks of data breaches and increasing consumer trust.

4mo ago · datadog-security-labs

Threat actors are targeting Salesforce environments by exploiting compromised credentials, OAuth tokens, and misconfigured guest accounts to gain unauthorized access. They perform reconnaissance by querying API endpoints to enumerate resources, discover data objects, and assess API usage limits. This activity is often followed by data enumeration and potential exfiltration, leveraging legitimate authentication mechanisms to blend in with normal traffic. Attackers may use brute-force techniques against weak MFA methods or socially engineer users to approve malicious connected apps.

4mo ago · datadog-security-labs

This article demonstrates a cross-tenant compromise scenario involving Entra agent identities, where an attacker compromises a privileged agent blueprint in one tenant and leverages it to gain unauthorized access to agent identities in another tenant. The attacker adds a credential to a third-party blueprint called 'People Team Agents' and uses it to authenticate as a high-privilege agent, 'Temporary Access Agent', in a subsidiary tenant. This agent has permissions to read user details and reset passwords via Microsoft Graph, which the attacker abuses to set a temporary access pass (TAP) for a Global Administrator account, achieving full compromise of the subsidiary tenant. The attack highlights the risks of trusting third-party agent blueprints with broad permissions across multiple tenants.