“Microsoft”

Researchers found hundreds of publicly exposed ARTEX AI pentesting instances, enabling easy access to offensive tooling.

Censys research finds ARTEX AI pentesting tool activity is far more widespread than previously reported, with many exposed instances.

CVE-2026-83844 in Windows Paint enables 0-click remote code execution, complicating patch verification for administrators.

Chainalysis reports a multifront attack exposed usernames, password hashes, and live tokens, disrupting services and forcing shutdowns.

Active exploitation of a critical Node-RED flaw attempted to deploy Linux bot binaries and webshells from same IP.

Gorbag group exploits WinRAR flaw to deploy information-stealer malware against Ukrainian law enforcement and defense targets.

Threat actors used Teams social engineering and insecure AD CS to obtain privileged login certificates and compromise domain controllers.

BlackX UEFI bootkit infected patched Windows machines, exploiting Secure Boot ambiguities to persist at firmware level.

ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.

Adobe, Veeam and Juniper released patches addressing critical flaws that could allow code execution, auth bypass, and privilege escalation.

Phishing emails with fake FedEx invoices deliver Sirius Backdoor hidden in blank PDFs, loading code directly into memory.

Stolen Microsoft 365 session tokens led to account compromises across 79 organizations, enabling unauthorized access and email tampering.

A China-aligned APT used AI pentest tool Artex in attacks against ConnectWise, gaining privileged access to many customers.

BlackX UEFI bootkit exploited Baton Drop to bypass Secure Boot, deployed in espionage targeting diplomatic entities in Central Asia.

EU Commission will investigate whether Booking.com adequately protects customers from phishing and scam risks on its platform.

Microsoft links Storm-0940 using ARTEX AI to speed a ConnectWise supply-chain compromise affecting thousands of tenants.

Threat actors abused AI platform Cairn to gain persistent access and conduct financial theft across 100+ organizations.

ConnectWise suspends Cloud Backup after theft of API/M365 tokens; downstream MSPs and tenants at risk of unauthorized access.