Unattended AI Agent Exploits Thai Finance Ministry's Network
PremiumHermes AI agent run in unattended mode automated post-exploitation at Thailand's Finance Ministry, escalating access and data discovery.
§Source · The Hacker News
The Hacker News
Every dispatch we have aggregated from The Hacker News.
All dispatchesMonday, July 27
Critical Security Fixes Released for Redis Following Zero-Day Exploits
PremiumResearchers published Redis authenticated RCE PoCs for multiple versions, prompting emergency Redis security releases.
Certighost Flaw Enables AD Users to Masquerade as Domain Controllers
PremiumCertighost exploit lets low-privileged AD users obtain a DC certificate and authenticate as that machine, risking full directory compromise.
Cl0p Ransomware Exploits Critical Vulnerabilities in PTC Software
PremiumCl0p affiliates exploit unauthenticated RCEs in Windchill and FlexPLM to steal data for extortion campaigns.
Critical Zimbra Vulnerability Exploited by Russian Espionage Group
PremiumRussian state-linked actors exploited a Zimbra zero-day to steal emails and bypass MFA, prompting urgent patching and mitigations.
Sunday, July 26
Russian Intelligence Exploits IP Cameras to Monitor NATO and Ukrainian Military Movements
Russian intelligence hijacks IP cameras across Europe and Ukraine to monitor military logistics and transport routes.
Researchers Unveil Bit2Watt: A New Threat to Data Center and Grid Stability
Bit2Watt research shows GPU workloads by cloud tenants can oscillate data-center power draw, threatening grid stability without code exploits.
AI Infrastructure Faces Threat from New ENCFORGE Ransomware
JadePuffer/ENCFORGE targets AI model files, encrypting weights, vector indexes and datasets after Langflow RCE.
Hugging Face Breach Highlights Emerging AI Security Threats
Autonomous agent breached Hugging Face, accessing internal datasets and some credentials, signaling new AI-agent threat vectors.
Friday, July 24
Invisible Comments in Azure DevOps Pose AI Security Threat
PremiumAzure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.
Claude Cowork Vulnerability Exposes Mac Files to AI Agent Escape
PremiumSandbox escape in Anthropic's Claude Cowork could allow agent VM breakout to read/write Mac files for ~500,000 users.
JadeProx Operation Unveiled: Targeting Government and Healthcare Sectors with TriBack Loader
PremiumJadeProx China-linked cluster uses TriBack Loader to target government, healthcare, and education organizations in Asia and Latin America.
Chaos Ransomware Exploits Browsers for Stealthy Command Channels
PremiumChaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.
Monday, July 20
Critical OpenSSL Vulnerability Allows Memory Exhaustion via TLS Requests
PremiumHollowByte OpenSSL vulnerability allows an 11-byte TLS request to bloat server memory, causing denial-of-service until restart.
Malicious npm Packages Exploit Blockchain to Deploy RAT in Vite Ecosystem
PremiumSeven malicious Vite npm packages (ViteVenom) use blockchain-based C2 to deliver a RAT, compromising developer supply chains.
Russian Hackers Exploit ClickFix CAPTCHAs to Target Ukrainian Devices
PremiumUAC-0145 (Sandworm sub-cluster) uses ClickFix CAPTCHAs to trick Ukrainian targets into installing data-stealing malware.
New Exploits Target SonicWall SMA Devices Granting Root Access
PremiumZero-days in SonicWall SMA 1000 appliances were exploited prior to disclosure, enabling root-level compromise.
Friday, July 17
Compromised AsyncAPI npm Packages Unleash Complex Botnet Malware
PremiumFour @asyncapi npm packages were compromised to distribute a multi-stage botnet loader with credential-stealing payloads.
Advanced Malware Daxin and New Backdoor Stupig Target Taiwan Manufacturer
PremiumDaxin kernel rootkit resurfaces with a new Stupig pre-login backdoor targeting a Taiwan manufacturing firm for persistence.
Microsoft's Largest Patch Tuesday Addresses Over 600 Vulnerabilities, Including Active Zero-Day Exploits
PremiumMicrosoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.
Get these articles delivered to your inbox.
Subscribe free