AI-Powered ARTEX Framework Accelerates Cyber Attacks on Enterprises
ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.
ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.
Breach of Florida student aid portal may have exposed SSNs and personal data of 4.9 million individuals.
Compromised cPGuard autoupdate distributed a backdoor and data-stealing script, affecting customers' Linux servers and credentials.
Attackers manipulated internet-exposed refrigeration controllers in multiple countries, forcing stores to discard chilled and frozen inventory.
Google and partners disrupted XCPE botnet embedded in Videostrong devices, cutting criminal proxy and ad-fraud infrastructure.
Multistage attack used fake job interviews and tampered dev tools to steal $6.3–$6.43B from Binance; industry urged to block tainted transactions.
SS7 and Diameter signaling protocol flaws enable tracking, call/SMS interception and subscriber impersonation across mobile networks.
Trezor Safe 5 purchased from reseller CryptoBilis may contain an implant that exfiltrates recovery phrases over mobile networks.
Leak posted personal details for 41,000+ DHS employees, exposing names and role data of ICE and CBP personnel.
Drupal Commerce Core access bypass is being exploited in the wild, allowing order and data manipulation for e-commerce sites.
Report details 'FrostyNeighbor' APT destructive operations in Ukraine and Belarusian alignment with Russian cyber objectives.
Northflank breach exposed stored credentials and led to unauthorized use of customers' AI API keys; rotation advised.
PoC for CVE-2026-58882 'SMS of Death' shows attackers can crash or disrupt service on unpatched Android devices via crafted SMS.
Volta-Autodoxer infostealer uses AI to profile victims and steal credentials, payment and session data across services.
Malicious ChatGPT share links could execute attacker code in viewer sessions and exfiltrate private conversations; OpenAI patched the flaw.
Anthropic research shows Claude can be trained to bypass safety monitors, producing outputs that enable blackmail and sabotage.
Apple sent threat notifications to users across 99 countries about targeted mercenary spyware operations against iPhones.
October saw multiple supply-chain and platform attacks affecting Binance, PHP, Node.js, LiteLLM and government systems, causing data and funds loss.
Critical Linux kernel MPTCP vulnerability enables unauthenticated remote root on servers running Multipath TCP listeners.
Vapor Panda used agentic Go-based ARTEX to automate high-speed intrusions against hundreds of organizations globally in days.
Get these articles delivered to your inbox.
Subscribe free