Cybersecurity researchers at Intruder have made a groundbreaking discovery in the field of vulnerability research, leveraging artificial intelligence (AI) tokens to automatically identify zero-day vulnerabilities in production software. In an experiment that has sparked both excitement and concern, the team successfully used Large Language Models (LLMs) to find a novel SQL injection zero-day in a … Read more
A Russian-speaking threat actor has been using Google’s open-source Gemini CLI AI tool as a hacking agent to operate a small-scale botnet, deploying malware and controlling infected systems without safety disclaimers. The AI tool, designed to assist with tasks such as deployment and operations, was instead used to troubleshoot problems on the fly and even … Read more
A sophisticated malware framework, OkoBot, has been discovered injecting phishing attacks into popular cryptocurrency wallet apps Ledger and Trezor, compromising user accounts and potentially leading to significant financial losses. The malicious software injects a fake seed phrase into these wallets’ authentication screens, tricking users into entering their sensitive information. This deception is made possible by … Read more
As researchers at Cybersecurity firm, Cygnus, dug into the inner workings of TuxBot v3, they were met with a chilling realization – this IoT botnet is evolving at an unprecedented rate, harnessing the power of Large Language Models (LLMs) to create an unparalleled level of sophistication. What started as a relatively simple malware has transformed … Read more
Critical SharePoint Vulnerabilities Being Actively Exploited, CISA Warns A major cybersecurity threat has been identified by the US Cybersecurity and Infrastructure Security Agency (CISA), which warns that attackers are actively exploiting three vulnerabilities in Microsoft’s popular SharePoint Server software. The affected flaws, tracked as CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, allow hackers to bypass authentication, gain remote … Read more
Cybersecurity researchers at Intruder have developed a cutting-edge system that leverages artificial intelligence (AI) to automatically discover and exploit previously unknown security vulnerabilities in production software. Dubbed a “vulnerability vending machine,” this AI-powered pipeline has successfully identified a zero-day SQL injection vulnerability in a popular WordPress plugin used by over 300,000 users. The Intruder team’s … Read more
A Supply-Chain Attack Unfolds: AsyncAPI Packages Compromised with Credential-Stealing Malware In a brazen supply-chain attack, five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in just four hours and seven minutes. The compromised packages, part of the @asyncapi namespace, had a staggering cumulative weekly download count of over 2.25 million. … Read more
Major Browser and Software Updates Patch Critical Flaws Exposed by AI-Powered Threats A critical wave of security updates has swept across the tech landscape, with multiple high-profile companies releasing fixes for devastating vulnerabilities exposed by cutting-edge AI-powered threat detection. Firefox, Chrome, Adobe, and VMware have all issued patches to address a range of serious flaws … Read more
A sophisticated malware framework known as OkoBot has been discovered to be targeting Ledger and Trezor cryptocurrency wallet users through a clever phishing tactic. The attack, which leverages a combination of social engineering and technical expertise, has left many in the crypto community on high alert. The OkoBot malware framework is designed to phish seed … Read more
A massive supply-chain attack has compromised five versions of AsyncAPI packages on the Node Package Manager (npm), delivering a remote access trojan with info-stealing capabilities to over 2.25 million users. The threat actor exploited a misconfigured GitHub Actions workflow, injecting malware into project files and publishing trojanized packages in the @asyncapi namespace. The malicious packages, … Read more