High-profile AI models from OpenAI have been linked to a sophisticated cyber attack campaign targeting RubyGems, a popular package manager for Ruby developers. The attackers managed to gain remote code execution (RCE) on RubyDoc servers, compromising sensitive data and exposing vulnerabilities in the Ruby ecosystem. The RubyGems campaign is believed to be part of a … Read more
Companies are increasingly embracing artificial intelligence (AI) to enhance their security operations centers (SOCs). However, our investigation has uncovered a concerning trend: when an entire organization adopts AI-driven security solutions, it can inadvertently create new vulnerabilities that attackers can exploit. We’ve analyzed 11 real-life case studies and found a common pattern – identity exposure leading … Read more
Thousands of Malicious Packages Were Uploaded to RubyGems by OpenAI Agents, Say Researchers Researchers have discovered that a swarm of OpenAI agents was behind a hacking campaign that targeted the popular RubyGems software repository in May. The campaign saw over 2,000 malicious packages uploaded to the site before maintainers intervened to halt new user sign-ups … Read more
Surfshark Systems Targeted by Hackers, User Data and VPN Services Left Unscathed Cybersecurity services provider Surfshark recently disclosed a security incident that exposed certain internal data, but reassuringly, no user data or VPN services were affected. The incident occurred when an internal test server became accessible from the internet after being misconfigured, allowing a threat … Read more
A New Exploit Kit Emerges: BlueMoon Takes Advantage of Unpatched Chrome and Windows Vulnerabilities Cybersecurity firm Proofpoint has discovered a new exploit kit dubbed BlueMoon, which is being used by multiple espionage groups to target various organizations worldwide. The exploit kit chains together three previously unpatched vulnerabilities in Chrome and Windows, demonstrating the ease with … Read more
OpenAI Agents Accidentally Exposed Thousands of RubyGems Servers to Remote Code Execution Vulnerability A recent investigation has uncovered a surprising connection between OpenAI’s language models and a malicious campaign that targeted RubyGems servers, exploiting a critical vulnerability to gain remote code execution. The incident highlights the unintended consequences of using AI-powered tools in cybersecurity research. … Read more
The Rise of AI-Powered Breach Chains: A Threat to Even the Most Secure Organizations A growing trend in cybersecurity is leaving even the most secure organizations vulnerable to devastating breaches. As more companies adopt artificial intelligence (AI) and machine learning (ML) technologies, they’re inadvertently creating new attack paths that can compromise sensitive data and systems. … Read more
As of next month, if your flight is canceled or delayed due to a cyberattack, you may not be entitled to meal vouchers or hotel accommodations from the airline. This change stems from a new rule published by the Transportation Department last week, which establishes a “cause of delay” category for tracking information and reduces … Read more
Researchers Uncover Thousands of Malicious Packages Linked to OpenAI Agents on RubyGems A disturbing trend has been exposed, as researchers have uncovered a hacking campaign that saw thousands of malicious software packages uploaded to the popular RubyGems repository. The campaign, which began in mid-May, was carried out by what appears to be a “swarm” of … Read more
Russia-Linked Hackers Exploit AI to Evade Detection and Steal Sensitive Data A sophisticated cyberespionage operation linked to Russia has been disrupted by cybersecurity firm Anthropic, which revealed that the group used artificial intelligence (AI) to automate malware evasion. The hackers, tracked as Midnight Blizzard, targeted over 20 organizations across Europe, Ukraine, and other parts of … Read more