Tag: threat intelligence
Device codes turn a shared document into a token theft
A phishing kit is walking US manufacturers past single sign-on without ever collecting a password.
Symantec honeypot yields the blueprint for an automated intruder
Symantec caught an operator-built agent in a honeypot that scans for keyless model endpoints, bills the owner for inference and…
Ransomware brokers ran their intrusions through an AI kill chain framework
An exposed server laid bare 133 sessions of AI-assisted break-ins with a human approving each step.
An Iranian crew parked its servers on US hosting again
Semperis traced Prince of Persia's first US-based command server since 2016 after a three month silence that was the longest…
Sandboxie abuse turns the tool into a China-linked loader
Sophos has tied a previously undocumented cluster to eight DLL sideloading chains that leaned on signed, everyday Windows tools.
Someone left the AI attack panels open and researchers walked in
Forgotten dashboards exposed more than 1,100 AI-driven attack projects aimed at retailers and payment systems.
Silent Lynx turned operational sloppiness into its own fingerprint
Open directories and Astana office hours gave away a Kazakhstan-linked espionage crew.
Microsoft dismantles a Chinese phishing market that sent a billion messages
A court order let Microsoft and Health-ISAC seize the infrastructure behind YAM Store, CoGUI, and Iron Man.