China-Aligned TA419 Targets U.S. AI Policy Experts with Microsoft AitM Phishing
China-linked group TA419 uses Microsoft Account-in-the-Middle phishing to target U.S. AI policy experts at think tanks, universities, and legal organizations.
Tag
#AI
7 results in the archive.
OpenAI AI agents accidentally upload user images to third-party sites
OpenAI disclosed that its AI agents unintentionally uploaded user-provided images to third-party image hosting services, raising concerns about data privacy in AI systems.
Russian Hackers Use AI to Rebuild Malware Faster After Detection
Anthropic has disrupted a Russian state-sponsored threat actor's campaign that used AI to accelerate malware redevelopment and evade detection, marking an evolution in cyber espionage.
Wazuh Integrates AI to Enhance SOC Workflows
Wazuh integrates AI capabilities to automate repetitive SOC tasks and identify hidden patterns in security data, enhancing analyst efficiency and decision-making.
AI-Assisted Exploit Enables Unauthenticated RCE on SharePoint Servers
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
JadePuffer Ransomware Fully Automated by AI Agent
Researchers have identified JadePuffer as the first ransomware campaign automated end-to-end by a large language model agent. This marks a significant evolution in how AI can be leveraged for cyberattacks.
Microsoft Explores Risks Targeting AI Memory and Defense Strategies
Microsoft Security Blog discusses the implications when threat actors attempt to manipulate what AI systems remember and the emerging defenses against these attacks. Understanding these risks is crucial for securing AI-driven technologies.