Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks

A Massive AI-Powered Cyberattack Has Exposed Seven Chinese Research Labs to Industrial-Scale Data Theft In a shocking revelation, Anthropic, a prominent artificial intelligence research organization, has disclosed that seven China-based AI labs have been compromised by industrial-scale Claude distillation attacks. These attacks exploit the vulnerability of sensitive data in various domains, allowing attackers to gain … Read more

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

A Critical Vulnerability in GitLab Has Been Actively Exploited, Putting Millions of Users at Risk GitLab, a widely-used platform for software development and collaboration, has been hit with a critical vulnerability that allows attackers to read sensitive files on compromised accounts. The flaw, given a CVSS (Common Vulnerability Scoring System) rating of 10 – the … Read more

Florida confirms DMV database breached via stolen police account

Florida’s Driver Database Breached After Stolen Police Account Compromised A significant security incident has shaken the state of Florida, with its Department of Highway Safety and Motor Vehicles (FLHSMV) confirming that its DAVID driver database was breached by hackers. The breach, attributed to the notorious ShinyHunters extortion gang, raises concerns about data protection and highlights … Read more

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Russian State-Sponsored Hackers Use Innovative Malware Rebuilding Technique, Exploiting Vulnerabilities in Security Software A disturbing trend has emerged in the world of cyber warfare, as Russian state-sponsored hackers have been caught using a sophisticated technique to rebuild malware after it’s been detected by security software. This clever tactic allows attackers to stay one step ahead … Read more

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Claude, a sophisticated and highly adaptable malware framework, has been identified as the culprit behind a wave of automated attacks targeting multiple victims worldwide. This malicious tool has been used to exploit vulnerabilities in various systems, allowing attackers to steal sensitive data and wreak havoc on organizations’ digital security. At its core, Claude is an … Read more

Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks

A network of seven China-based AI labs has been caught running large-scale attacks using a sophisticated technique called Claude Distillation, according to recent findings. The affected organizations are all prominent players in the artificial intelligence (AI) and machine learning (ML) communities, with some having already publicly disclosed that they’ve been impacted. At its core, Claude … Read more

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

A Critical File-Read Flaw in GitLab Exposes Users to High-Risk Attacks GitLab, a popular software development platform, has disclosed a critical vulnerability in its system that allows attackers to read sensitive files. The flaw, rated CVSS 10 – the highest severity rating on the Common Vulnerability Scoring System – has already been exploited in-the-wild, putting … Read more

Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

A newly uncovered AI-powered attack on Papercut print management software has sent shockwaves through the cybersecurity community, highlighting the rapid evolution of cyberattack strategies. In a matter of hours, an AI swarm compromised over 440 instances of Papercut NG and MF hosted by 395 organizations in 48 countries, demonstrating the potential for unprecedented speed and … Read more

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Threat Actors Hijack Trusted AI Platforms to Deliver Malware Cybersecurity researchers at Huntress have uncovered a disturbing trend in which malicious actors are exploiting trusted AI platforms to deliver malware to unsuspecting users. Over the past nine months, these attackers have successfully weaponized shareable AI content, public mini-apps, and sponsored search placement to target AI … Read more

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

A recent spate of high-profile breaches has highlighted a worrying trend in cybersecurity. Despite robust perimeter defenses, many organizations are finding themselves vulnerable not just from external threats, but also from within – due to identity exposure and compromised user credentials. A closer examination of these incidents reveals that the root cause often lies not … Read more