Skip to content

Search results for «AI Attacks» Page 2

  1. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  2. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  3. Fintech Data Breach Analysis Reveals AI Attacks on 16 South Korean Firms

    AI-driven attacks hit 16 South Korean financial institutions in late 2026, exposing roughly 100,000 personal records. This analysis details the timeline, affected sectors, and inspection findings.

    3 min read

  4. Domain Registrar Security Risks: ccTLD Registry Hijacks Enable Unauthorized Certificates

    Registry-level compromises in three ccTLDs led to unauthorized TLS certificates for major domains. The incidents reveal gaps in domain registrar security controls and DNS validation processes.

    3 min read

  5. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  6. Gopax Security Review: Data Breach Details and Trustworthiness Assessment

    Gopax experienced a limited data exposure in October 2026 affecting nine accounts. The exchange remains a licensed South Korean VASP with ISMS and ISO certifications but lacks full personal data protection certification.

    3 min read

  7. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  8. AI Tools Security Review Shows Critical Observability Gaps in Public AI Agents

    The Partnership on AI report identifies six telemetry gaps that limit monitoring of publicly available AI agents and increase risks during scaling.

    3 min read

  9. AI Tools Security Review Shows Malware Campaigns Targeting Claude and ChatGPT Users

    Analyses from April to October 2026 recorded over 1,200 sandbox submissions tied to fake AI tool campaigns, with Claude and ChatGPT lures dominating.

    3 min read

  10. WordPress Hosting Security Risks Highlighted by CyberXero AI Campaign

    The CyberXero campaign shows how AI-augmented attacks exploit WordPress vulnerabilities at scale, raising questions about website builder trustworthiness and hosting protections.

    3 min read

  11. Fintech Data Breach Analysis: AI Attacks Expose 100,000 Records Across 16 South Korean Institutions

    AI tools powered coordinated attacks on peripheral systems of 16 South Korean financial firms, exposing names, phone numbers and resident registration data for roughly 100,000 individuals.

    3 min read

  12. Vercel Sandbox security review: Isolation limits for AI-generated code

    A detailed look at the isolation mechanisms, reported vulnerabilities, and remaining risks when running untrusted code in Vercel Sandbox microVMs.

    3 min read