Intelligence Feed

3w ago · hacker-news

China's Ministry of State Security (MSS) accused the U.S. National Security Agency (NSA) of conducting a multi-stage cyber attack on the National Time Service Center (NTSC), starting in March 2022. The attack involved compromising mobile devices via a foreign SMS service, using stolen credentials, and deploying a cyber warfare platform with 42 specialized tools to target internal systems. The MSS claims the attack aimed to disrupt 'Beijing Time' infrastructure and was ultimately thwarted, with the U.S. accused of using global infrastructure to conceal its activities.

3w ago · hacker-news

A critical remote code execution vulnerability in Microsoft WSUS, tracked as CVE-2025-59287, is under active exploitation with public proof-of-concept code available. The flaw stems from unsafe deserialization of AuthorizationCookie objects via the BinaryFormatter, allowing unauthenticated attackers to execute arbitrary code with SYSTEM privileges. Exploitation has been observed in the wild, with threat actors targeting publicly exposed WSUS instances to deploy PowerShell payloads for reconnaissance and potential supply chain attacks. Organizations are urged to apply emergency patches immediately, as unpatched systems are at high risk of compromise.

3w ago · hacker-news

APT36, also known as Transparent Tribe, has targeted Indian government entities using spear-phishing emails delivering a Golang-based DeskRAT malware. The campaign primarily targets BOSS Linux systems, leveraging malicious Desktop files and cloud storage services to distribute payloads. DeskRAT establishes persistence through multiple methods and communicates with C2 servers via WebSockets, enabling file exfiltration and remote execution. The group has evolved to use custom malware, indicating increased sophistication.

3w ago · hacker-news

A security researcher from XBOW discovered two critical vulnerabilities in Microsoft's Bing Images service that allowed remote command execution as SYSTEM on Windows and root on Linux servers by exploiting crafted SVG files. The flaws, tracked as CVE-2026-32194 and CVE-2026-32191, stemmed from improper handling of SVG image references that led to command injection via ImageMagick delegates. Microsoft patched the issues server-side before public disclosure, with no evidence of exploitation in the wild.

3w ago · hacker-news

Researchers H0j3n and Aniq Fakhrul disclosed a working exploit named Certighost that enables low-privileged Active Directory users to impersonate a Domain Controller by obtaining a certificate via a vulnerable AD CS enrollment fallback mechanism. The exploit abuses improper validation of the chase target during certificate enrollment, allowing attackers to relay authentication and obtain a certificate for a Domain Controller. This can lead to privilege escalation via DCSync to extract sensitive account secrets such as krbtgt, even without administrator rights.

3w ago · hacker-news

North Korean threat actor BlueNoroff is conducting targeted phishing campaigns using typosquatted Zoom and Microsoft Teams domains to deliver the ClickFix malware. The attackers hijack trusted Telegram accounts in the cryptocurrency space to distribute lures, enabling social engineering attacks that profile victims' cryptocurrency wallets before delivering malware. The phishing kit uses AI-generated headshots and real body movements from prior meetings to create convincing fake calls, and operators selectively target high-value individuals by fingerprinting browser wallets. The campaign demonstrates a self-propagating attack chain leveraging compromised identities and infrastructure for sustained operations.

3w ago · hacker-news

The Golden Chickens threat actor, tracked as TAG-195, has resurged with four new malware families: TinyEgg, ChonkyChicken, a modular variant of ChonkyChicken, and ChromEggscalator. These tools represent an evolution toward modular, operator-driven malware architectures designed for defense evasion and flexible post-compromise operations. The group uses ClickFix-style social engineering to deploy payloads, establishing persistent access and enabling browser theft, surveillance, and remote execution. The malware communicates via WebSockets to C2 servers and leverages shared infrastructure and techniques across families.

3w ago · hacker-news

A threat actor leveraged the open-source Hermes AI agent in YOLO mode to conduct unattended post-exploitation activities within Thailand's Ministry of Finance network. The attacker gained initial access via a web shell and exploited misconfigured Hadoop services with default authentication disabled. The Hermes agent performed automated reconnaissance, including kernel vulnerability scanning and file system crawling, while leaving logs exposed on a public server. The operator used Chinese-language artifacts and infrastructure linked to Hong Kong, suggesting a Chinese-speaking actor, though no specific group was attributed.

3w ago · hacker-news

The article discusses the growing challenge of securing AI agents within enterprise environments, emphasizing that mere visibility into AI agent presence is insufficient. It highlights the risks posed by AI agents' autonomy, dynamic behavior, and access to critical systems, which outpace traditional static access controls. The focus must shift from discovery to active enforcement of least privilege, intent-based policies, and identity-centric governance to mitigate privilege abuse, rogue agents, and other agentic risks.

3w ago · hacker-news

A critical vulnerability named AgentForger in OpenAI's ChatGPT Workspace Agents could allow attackers to deploy rogue AI agents via a phishing link. The flaw, a cross-site request forgery (CSRF), enables automatic creation and execution of malicious agents within an authenticated user's session without further interaction. These agents can persist, execute tasks from emails, access enterprise data, and send phishing messages, effectively becoming autonomous insiders.

3w ago · hacker-news

A Russia-aligned threat cluster known as UAC-0099 is distributing a malicious Notepad++ plugin to deliver MATCHBOIL.V2 malware, a modified version of the C#-based loader MATCHBOIL. The attack begins with a phishing email containing an image that leads to a shortened URL, which redirects to a file-sharing service hosting a malicious ZIP file. The ZIP contains a VBScript that executes a decoy PDF while silently deploying a malicious DLL and additional payloads, including RemoteLibUpdater.exe (BURNYBEAR) and InitTest.dll. The campaign aims to establish persistence and conduct espionage, with no financial motive observed.

3w ago · hacker-news

Redis disclosed and patched multiple memory corruption vulnerabilities in its database software that could lead to authenticated remote code execution (RCE). Two distinct exploit chains were identified: one leveraging a shared-NACK use-after-free in Redis Streams, and another exploiting an out-of-bounds write in the RedisBloom TDigest RDB loader. Both vulnerabilities require the RESTORE command and were exploited in proof-of-concept (PoC) scripts to achieve arbitrary memory access and system command execution. The flaws affect multiple Redis versions, including 6.2.22, 7.4.9, 8.6.4, and 8.8.0, with fixes released on July 23, 2026.

3w ago · hacker-news

NodeBB patched eight high-severity vulnerabilities discovered by AI-powered pentesting tools, affecting all versions prior to 4.14.0. The flaws enable privilege escalation, private message access, unauthorized admin dashboard access, and cross-site scripting via malicious links in forum content. Five of the vulnerabilities are tied to federation functionality with the fediverse, and while no active exploitation has been reported, administrators are urged to upgrade to version 4.14.2 due to the critical nature of the exposures.

3w ago · hacker-news

A Russian state-supported espionage group exploited a zero-day vulnerability (CVE-2025-66376) in Zimbra's webmail client to conduct cyber espionage against Western government and commercial organizations. The vulnerability allowed attackers to steal emails, passwords, and 2FA codes through a zero-click exploit triggered by viewing a malicious email. The campaign, active since at least July 2025, used HTML smuggling and DNS-based exfiltration, targeting sectors including government, defense, and finance across NATO, Ukraine, CIS, and Africa.

3w ago · hacker-news

A China-nexus threat actor tracked as JadeProx has been conducting cyberattacks against government, healthcare, and education sectors in Asia and Latin America using a previously undocumented Windows loader named TriBack Loader. The attacks leverage DLL sideloading techniques and phishing campaigns, including a fake Anthropic Claude website, to deploy backdoors such as Beagle and AdaptixC2. The operators also perform large-scale scanning for known vulnerabilities and maintain persistence via malicious startup entries and webshells.

3w ago · hacker-news

The Chaos ransomware group is leveraging a Rust-based implant called msaRAT to route command-and-control (C2) traffic through headless instances of Chrome or Edge browsers. The malware uses the Chrome DevTools Protocol to drive the browser and establishes WebRTC data channels via Twilio's TURN service, effectively concealing the attacker's infrastructure. C2 traffic is relayed through legitimate services like Cloudflare Workers and Twilio, making detection difficult. The implant is delivered via a malicious MSI installer that mimics a Windows update and loads a DLL into memory.

3w ago · hacker-news

A sandbox escape vulnerability named SharedRoot has been discovered in Anthropic's Claude Cowork, allowing an AI agent to break out of its Linux VM and access arbitrary files on the host macOS system. The flaw stems from the entire host filesystem being mounted read-write into the VM, enabling privilege escalation via exploitation of CVE-2026-46331 (pedit COW) in the guest kernel. Although Anthropic has not issued a direct fix, the latest version defaults to cloud execution, mitigating the risk for most users, but local execution remains vulnerable.

3w ago · hacker-news

Recent cyber threats include malicious npm and PyPI packages delivering infostealers, counterfeit VS Code extensions exfiltrating machine data, and Android spyware disguised as legitimate safety apps. Iranian-affiliated actors are targeting PLC systems in critical infrastructure, while attackers leverage AI models for prompt injection and malware development. Campaigns also involve malvertising distributing SectopRAT and MarkiRAT, DNS tunneling by TrickBot for C2 communication, and exploitation of trust in legitimate platforms to deliver malware.

3w ago · hacker-news

Google has introduced a new selfie video verification feature to help users recover access to their accounts if locked out. The feature uses liveness detection through guided head movements and compares new selfie videos to a previously stored, encrypted video to verify identity. The feature is opt-in, not available for certain account types, and emphasizes privacy by not retaining videos beyond authentication purposes. Google also introduced a hand gesture verification system for reCAPTCHA using hand landmark data, which is deleted after verification.

3w ago · hacker-news

Attackers have compromised GitHub repositories of a legitimate PHP developer, dinushchathurya, to distribute malicious GitHub Actions workflows. These workflows leverage GitHub-hosted runners to scan for and exploit cPanel and WHM servers vulnerable to CVE-2026-41940, an authentication bypass flaw. The campaign conducts large-scale server-side credential theft, harvesting sensitive data such as cloud keys, API tokens, and SSH credentials, while abusing legitimate development infrastructure for scalability and stealth.

3w ago · hacker-news

The article discusses the emerging threat of synthetic identity fraud applied to machine identities, where attackers create non-human identities (NHIs) that were never legitimately provisioned. These fabricated identities blend real environmental attributes with fake ones to appear legitimate, evading detection since they have no human owner to raise alerts. As enterprises struggle to track growing numbers of NHIs and adopt agentic AI systems that dynamically create identities, the risk of undetected, privilege-accumulating fake machine identities increases significantly.

3w ago · hacker-news

Check Point has patched multiple critical vulnerabilities in its Security Management and Multi-Domain Security Management products, including CVE-2026-16232, an authentication bypass flaw under active exploitation. The vulnerability allows unauthenticated remote attackers to obtain full administrative access to the SmartConsole, enabling modification of security policies and configurations. Exploitation requires internet-accessible management interfaces without IP restrictions, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch by July 25, 2026.

3w ago · hacker-news

RefluXFS is a nine-year-old Linux kernel vulnerability (CVE-2026-64600) affecting XFS filesystems with reflink enabled, allowing unprivileged local users to escalate privileges to root by exploiting a race condition in copy-on-write operations. The flaw impacts default installations of Red Hat Enterprise Linux, Fedora Server, Amazon Linux, and related distributions. Exploitation modifies root-owned files like /etc/passwd or setuid binaries without altering metadata, making detection difficult. The vulnerability was discovered using an AI model, which also generated a working exploit and advisory.

4w ago · hacker-news

A vulnerability chain dubbed HermeticReader in the Adobe Acrobat Chrome extension, tracked as CVE-2026-48294, allowed malicious websites to bypass the same-origin policy and steal data from WhatsApp Web sessions. The flaw exploited universal cross-site scripting (UXSS) to access session-bound content without requiring malware installation or credential theft. Attackers only needed to trick users into visiting a malicious page, which could silently extract WhatsApp chat lists, messages, contact names, and profile information.

4w ago · hacker-news

GitHub has restructured its public bug bounty program, reducing payout amounts by at least 50% across all severity levels and shifting higher rewards to a private VIP tier. The change aims to reduce noise from low-quality or AI-generated reports while incentivizing high-quality research through exclusive access and larger rewards. This shift reflects broader industry trends as AI tools increase the volume of vulnerability findings, making triage and validation more critical. Human expertise remains essential for identifying complex, high-impact vulnerabilities that AI alone cannot reliably uncover.

4w ago · hacker-news

A high-severity local privilege escalation vulnerability, CVE-2026-8933, exists in the snap-confine component of default Ubuntu Desktop installations (24.04, 25.10, 26.04), allowing unprivileged users to gain root access. The flaw arises from a race condition during sandbox initialization, enabling attackers to manipulate temporary file ownership and permissions. By exploiting symbolic links and FUSE file systems, an attacker can write malicious rules to sensitive system paths and achieve arbitrary code execution as root.

4w ago · hacker-news

The article discusses the increasing sophistication of cyber threats powered by AI, such as 'Mythos-class' threats, which rapidly exploit vulnerabilities and bypass traditional defenses. It emphasizes that modern attacks are increasingly malware-free, relying on techniques like credential theft and DLL side-loading. The piece advocates for multi-layered network detection and response (NDR) to unify telemetry from endpoint, identity, and cloud sources, enabling faster, more accurate threat detection and containment.

4w ago · hacker-news

The article discusses the growing adoption of AI tools in the workplace and the challenges security teams face in governing their use. It emphasizes that restrictive policies often lead to shadow IT, as employees bypass slow approval processes to use AI tools that improve productivity. Instead, the article advocates for a governance model that enables secure, fast access to approved AI tools, thereby reducing unauthorized usage and positioning security teams as strategic enablers.

4w ago · hacker-news

Hackers are actively exploiting a high-severity unauthenticated path traversal vulnerability, CVE-2026-29059, in the open-source developer platform Windmill. The flaw exists in the 'get_log_file' endpoint, allowing attackers to read arbitrary files on the server by manipulating the filename parameter. A key target is the /proc/1/environ file to extract the SUPERADMIN_SECRET environment variable, which can enable superadmin authentication and arbitrary code execution if set. The vulnerability has been patched in Windmill 1.603.3, but exploitation attempts continue against exposed instances.

4w ago · hacker-news

Law enforcement from Germany, the U.S., and Indonesia dismantled the Kratos phishing-as-a-service platform, which was used to steal Microsoft 365 session cookies and bypass multi-factor authentication (MFA). The platform enabled low-skill attackers to launch phishing campaigns via a franchise-like model, resulting in hundreds of thousands of victims across over 30 countries since late 2024. Kratos operated using an adversary-in-the-middle (AiTM) technique that captured live sessions, allowing attackers to bypass MFA by stealing session cookies. The takedown disrupted over 200 servers, but the customer base and existing kit code remain a persistent threat.