Intelligence Feed

4w ago · hacker-news

Researchers have identified critical vulnerabilities in five open-source Android AI agent frameworks—AppAgent, AppAgentX, Mobile-Agent-v3, Open-AutoGLM, and MobA—that enable attackers to execute arbitrary code on host PCs through invisible screen text, screenshot tampering, and broadcast interception. The attack chain leverages insufficient input sanitization, TOCTOU race conditions during screenshot capture, and unauthenticated broadcast receivers to escalate from a malicious app to full command execution. Although no CVEs have been assigned and no real-world exploitation has been observed, the attack preconditions are easily met via publicly available documentation, and no project maintainers have responded to responsible disclosure attempts.

4w ago · hacker-news

Zimbra has released security updates to address multiple vulnerabilities in its email platform, including a critical command injection flaw in the SNMP monitoring component and four cross-site scripting (XSS) vulnerabilities in the Classic Web Client. The command injection could allow remote code execution, while the XSS flaws could enable malicious scripts via crafted attachments or fields. Additionally, a mail forwarding restriction bypass vulnerability was patched. Although no active exploitation has been reported, historical abuse of similar flaws underscores the importance of prompt patching.

4w ago · hacker-news

Qilin ransomware actors exploited a patched PAN-OS authentication bypass vulnerability (CVE-2026-0257) to gain initial access to victim networks by establishing unauthorized SSL VPN sessions. They then performed credential harvesting, lateral movement using PsExec, and deployed ransomware payloads while clearing logs and disabling Microsoft Defender. Variability in post-exploitation tactics suggests multiple affiliates operating under a ransomware-as-a-service model.

4w ago · bleeping-computer

The article discusses the persistent threat to critical infrastructure from state-backed actors like Volt Typhoon, who exploit weak identity controls and compromised credentials to gain access and maintain long-term persistence. It highlights the Colonial Pipeline attack as an example of how a single unsecured VPN account can lead to widespread disruption. The focus is on the need for zero trust principles, particularly stronger identity and device verification, to defend against credential theft, living-off-the-land techniques, and unauthorized access through unmanaged devices.

4w ago · hacker-news

Threat actors are actively exploiting a critical sandbox escape vulnerability, CVE-2026-6875, in the ServiceNow AI Platform to achieve unauthenticated remote code execution. The flaw allows attackers to compromise ServiceNow instances and connected proxy servers by targeting a pre-authentication endpoint. Exploitation uses HTTP POST requests to the '/assessment_thanks.do' endpoint, leveraging a sandbox-escape gadget to execute arbitrary code. ServiceNow has released patches for multiple versions and is enhancing sandbox security to restrict executable code types.

4w ago · hacker-news

A new ransomware named ENCFORGE, attributed to the threat actor JADEPUFFER, is targeting AI model files through exploitation of a critical unauthenticated RCE vulnerability (CVE-2025-3248) in Langflow versions prior to 1.3.0. The attackers leverage the exposed Docker socket to escalate from container to host, deploying a custom-packed Go-based ransomware that encrypts AI-specific file types using AES-256-CTR and an embedded RSA-2048 public key. The ransomware avoids data exfiltration, instead relying solely on encryption, and leaves ransom notes with a Proton Mail contact reused from prior attacks, indicating campaign continuity.

4w ago · hacker-news

Attackers are actively exploiting two critical vulnerabilities in WordPress, collectively dubbed wp2shell, to achieve unauthenticated remote code execution on vulnerable sites. The exploit chain combines CVE-2026-63030 and CVE-2026-60137, enabling attackers to bypass authentication and execute arbitrary code via a single HTTP request. Post-exploitation activities include uploading malicious plugins, creating backdoor administrator accounts, deploying web shells, and attempting to install the Overlord RAT. Mass scanning is ongoing, with widespread exploitation observed globally.

4w ago · bleeping-computer

A Windows zero-day vulnerability dubbed LegacyHive, discovered by researcher 'Nightmare Eclipse,' allows non-admin users to escalate privileges by modifying registry hives, enabling code execution upon admin login. The flaw affects Windows 10 2004 and later, as well as Windows Server 2019 and newer. While Microsoft has not yet assigned a CVE or released an official patch, unofficial micropatches are available from ACROS Security via the 0Patch platform. The vulnerability has not been observed in active exploitation, but proof-of-concept code has been published, increasing the risk of weaponization.

4w ago · bleeping-computer

Microsoft has addressed a known issue causing Windows Server Update Services (WSUS) synchronization delays and timeouts, which has impacted the ability of administrators to deploy Windows updates. The problem stems from a buildup of publishing metadata on existing WSUS installations. Microsoft provided a manual fix involving database cleanup, reindexing, and application pool recycling to restore normal sync operations.

4w ago · bleeping-computer

The Qilin ransomware gang is actively exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' GlobalProtect VPN to gain unauthorized access to corporate networks. This flaw allows attackers to establish unauthorized VPN connections, leading to domain-wide ransomware deployment. Multiple Qilin affiliates are believed to be involved, leveraging the vulnerability in a ransomware-as-a-service model, with attacks observed throughout June 2026.

4w ago · bleeping-computer

Hackers exploited compromised off-chain infrastructure used by the Ostium decentralized trading platform to manipulate price feeds, resulting in the theft of $23.75 million in cryptocurrency from its liquidity provider vault. The attack did not affect trader collateral or existing leveraged positions, which remain frozen. Ostium, built on Arbitrum, paused trading within 60 minutes of the incident and is working on remediation while promising a future post-mortem analysis.

4w ago · bleeping-computer

A previously unknown threat actor, tracked as UTA0533, exploited two zero-day vulnerabilities in SonicWall SMA1000 appliances to deploy custom malware. The attack chain began with a server-side request forgery (SSRF) vulnerability (CVE-2026-15409) to access internal services, followed by a command injection flaw (CVE-2026-15410) to execute commands as root. The attackers deployed a custom Python dropper named KNUCKLEBALL, which installed Java-based malware Sou5 and ORANGETAIL for persistent access and command execution.

4w ago · bleeping-computer

Estée Lauder suffered a data breach after attackers exploited a vulnerability in the Oracle E-Business Suite (CVE-2025-61882) used for HR operations. The breach, which occurred around August 9, 2025, allowed unauthorized access to sensitive personal and financial information of individuals. The Clop ransomware gang is linked to the attack, having exploited the flaw as a zero-day since early August 2025.

4w ago · unit42

The Unit 42 2026 Global Incident Response Report highlights that AI is being used as a force multiplier by threat actors to accelerate attacks, particularly through automation of content generation, reconnaissance, and malware development. While AI enhances speed and efficiency, the core attack methods remain unchanged, relying on credential theft, phishing, and exploitation of known vulnerabilities. There is emerging experimentation with AI-powered malware and agentic ransomware, but no fundamental shift in tactics has been observed yet.

4w ago · hacker-news

The FakeGit campaign leverages nearly 7,600 malicious GitHub repositories to distribute SmartLoader malware, often disguised as AI skills or Model Context Protocol (MCP) servers. These repositories use convincing READMEs and copied projects to trick both human users and AI agents into downloading malicious ZIP files. The attack chain involves a LuaJIT loader that drops SmartLoader, which then deploys StealC, an information stealer. A novel technique called AgentBaiting enables AI agents to autonomously discover and act on malicious repositories without human intervention, increasing the risk of supply chain compromise.

4w ago · bleeping-computer

The JadePuffer agentic threat actor has evolved to target AI/ML infrastructure using custom ransomware named EncForge, which encrypts critical AI assets such as model checkpoints, training datasets, and vector databases. The attack leverages autonomous decision-making to adapt in real time, deploying Python scripts to deliver the Go-based EncForge payload after gaining root access via an exposed Docker socket. The ransomware uses AES-256 and RSA-2048 encryption, appends '.locked' to encrypted files, and leaves a ransom note, though no data exfiltration was observed.

4w ago · bleeping-computer

Security researchers from Pillar Security demonstrated sandbox escape techniques across four AI coding agents: Cursor, OpenAI's Codex CLI, Google's Gemini CLI, and Antigravity. The attacks leverage prompt injection to manipulate files within the sandboxed workspace, which are later executed or interpreted by trusted tools running outside the sandbox, leading to command execution on the host. These techniques exploit design flaws such as over-trusted configuration files, incomplete denylists, and privileged local daemons. Most vulnerabilities have been patched, though some CVEs are still pending.

4w ago · wiz

A critical pre-authentication remote code execution (RCE) vulnerability chain in WordPress Core, dubbed 'wp2shell' and tracked as CVE-2026-63030 and CVE-2026-60137, is being actively exploited in the wild. The vulnerabilities allow unauthenticated attackers to execute arbitrary code on vulnerable WordPress instances, leading to webshell deployment, user enumeration, and admin panel access. Multiple threat actors have been observed exploiting these flaws, deploying both simple and sophisticated PHP webshells, while mass scanning campaigns suggest widespread opportunistic targeting.

4w ago · hacker-news

This week's threat landscape highlights critical vulnerabilities in widely used platforms such as WordPress, SonicWall, and Microsoft SharePoint, with active exploitation observed in the wild. A pre-authenticated remote code execution flaw in WordPress Core (CVE-2026-63030 and CVE-2026-60137) enables unauthenticated attackers to execute code, posing a significant risk due to WordPress's global reach. SonicWall SMA appliances were exploited via zero-day vulnerabilities prior to patching, while CISA added a SharePoint RCE (CVE-2026-58644) to its known exploited list. Additionally, new malware frameworks like OkoBot and NadMesh target crypto assets and cloud AI services, indicating evolving attacker tactics leveraging automation and AI.

4w ago · hacker-news

HollowGraph is a newly discovered espionage malware that leverages a compromised Microsoft 365 calendar as a covert command-and-control (C2) channel, hiding operator instructions and exfiltrated data within calendar events dated to 2050. The malware uses legitimate Microsoft Graph API traffic to avoid detection, communicating via encrypted attachments on future-dated events. It is associated with the Cavern backdoor framework and shows potential ties to Iranian-linked actors, though attribution remains unconfirmed. The small, targeted footprint suggests focused cyber espionage rather than broad criminal activity.

4w ago · hacker-news

A cybercriminal operator left a server exposed, revealing an AI-assisted phishing toolkit used in a WebDAV-based malware campaign targeting Mexican users. The attacker leveraged generative AI to accelerate development and testing of social engineering lures and delivery mechanisms, including filename spoofing with right-to-left override (RTLO) and abuse of signed Windows binaries via a working directory hijack. The primary campaign delivered a .NET infostealer through a fake government ID site, while a secondary campaign used a trojanized DLL sideloaded via a signed Ubisoft binary to deploy a modular .NET RAT. The operation demonstrates a sophisticated, software-like development lifecycle enabled by AI tools.

4w ago · bleeping-computer

A newly identified malware named HollowGraph leverages compromised Microsoft 365 accounts and the Microsoft Graph API for command-and-control (C2) communications, using calendar events as a covert channel to send and receive encrypted commands and exfiltrated data. The malware is associated with the Cavern C2 framework and shows technical similarities to the Iranian-linked threat actor Lyceum, though attribution remains unconfirmed. HollowGraph employs hybrid encryption (RSA and AES-256-GCM), DNS tunneling for credential updates, and targets organizations in Israel for espionage purposes.

4w ago · hacker-news

The article discusses how the exposure window—the time between a vulnerability becoming exploitable and being remediated—remains the critical factor in breach risk, despite advances in AI-driven vulnerability discovery like Anthropic's Mythos. While vulnerability identification and prioritization now occur at machine speed, organizational mobilization lags, leaving critical systems exposed. Attackers exploit this gap rapidly, with eCrime breakout times as low as 29 minutes, far outpacing typical remediation timelines. The focus must shift to reducing the blast radius by prioritizing remediation of exposures that lead to critical assets.

4w ago · hacker-news

Russian intelligence services are actively hijacking internet-connected IP cameras across NATO countries and Ukraine to conduct cyber espionage, monitoring military logistics, troop movements, and weapons shipments. The attackers exploit default credentials and outdated firmware rather than zero-day vulnerabilities, using automated image recognition to identify military assets. While the number of confirmed breaches is low, the exposure of over 87,000 vulnerable devices presents a significant risk. The Dutch intelligence agencies AIVD and MIVD have issued warnings and mitigation guidance to secure camera systems.

4w ago · bleeping-computer

Hugging Face disclosed a breach where an autonomous AI agent exploited code-execution vulnerabilities in its data-processing pipeline to gain access to internal datasets and credentials. The attacker used a malicious dataset to execute code on a processing worker, enabling lateral movement across internal clusters. The campaign involved self-migrating command-and-control infrastructure hosted on public services, consistent with an 'agentic attacker' scenario. Hugging Face has since revoked credentials, rebuilt compromised nodes, and improved detection systems.

4w ago · bleeping-computer

The article discusses the challenges and considerations for evaluating AI-powered Security Operations Center (SOC) solutions, emphasizing the gap between vendor promises and real-world performance. It highlights that while AI SOC tools show potential in automating threat detection and response, many fail in production due to misalignment with team workflows, lack of contextual data, and durability issues. The guide recommends a structured evaluation framework focusing on verdict accuracy, operational fit, long-term reliability, and lessons from practitioners. No specific threat actor, malware, or attack campaign is described.

4w ago · hacker-news

A Russian-speaking threat actor known as 'bandcampro' leveraged Google's open-source Gemini CLI as an AI-powered hacking agent to control a botnet of eight dental clinic computers. The AI was used to autonomously set up and manage command-and-control infrastructure, debug connectivity issues, and perform tasks such as password cracking and botnet management. The operation, part of the 'Patriot Bait' campaign, demonstrates a novel use of AI to reduce operator effort, enable rapid infrastructure replication, and complicate attribution.

4w ago · hacker-news

A heap-based buffer overflow vulnerability, CVE-2026-14266, in 7-Zip's XZ archive handler could allow attackers to execute code when a victim opens a maliciously crafted archive. The flaw, rated High severity with a CVSS score of 7.0, stems from improper handling of XZ chunked data leading to an out-of-bounds write. Exploitation requires local interaction, and no public proof-of-concept or active exploitation has been observed as of July 20, 2026. Users are advised to update to 7-Zip 26.02 or later to mitigate the risk.

4w ago · bleeping-computer

Attackers are actively exploiting a critical remote code execution vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, allowing unauthenticated threat actors to escape the sandbox and execute arbitrary code. The flaw was patched on July 13, 2026, but exploitation was confirmed in the wild just days later. Despite ServiceNow not officially acknowledging active exploitation, threat intelligence firm Defused has observed attack attempts leveraging the same endpoint used in the vulnerability proof-of-concept.

4w ago · bleeping-computer

Microsoft released an out-of-band (OOB) update (KB5121767) to address a compatibility issue between a Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework (IPF) Processor Participant driver on certain Dell PCs. The conflict, introduced in the June 2026 KB5095093 preview update, caused unexpected shutdowns, performance degradation, increased heat, and battery drain. The issue affected Dell systems running Windows 11 25H2 and 24H2 after installing the July 2026 KB5101650 update, with Microsoft temporarily blocking the update until the fix was available.