… Some of the malware created this way was tested in virtual environments against EDR tools from Sophos, CrowdStrike, and Microsoft. Despite the malware research and development orchestrated using AI technology, the researchers note that the workflow is entirely human-driven. …
Google: Hackers used AI to develop zero-day exploit for web admin tool By Bill Toulas May 11, 2026 09:02 AM Researchers at Google Threat Intelligence Group GTIG say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI. …
… According to the researchers, GreyVibe has used several attack chains against its targets, including: PhantomMail: Spear-phishing emails delivering malicious ZIP/RAR archives via Google Drive and 4sync links, using decoy PDFs or fake errors while deploying malware. …
… Researchers at HiddenLayer, a company focused on safeguarding AI and ML models against attacks, discovered the campaign on May 7, after noticing a malicious repository named Open-OSS/privacy-filter. “The repository had typosquatted OpenAI's legitimate Privacy Filter release, copied its model card n… …
… Microsoft researchers discovered the campaign and determined that the attack begins when users look for one of the aforementioned utilities and are presented with malicious links boosted in search rankings through SEO poisoning. …
… DEVCORE won this year's edition of Pwn2Own Berlin with 50.5 Master of Pwn points and $505,000 in rewards throughout the three-day contest after hacking Microsoft SharePoint, Microsoft Exchange, Microsoft Edge, and Windows 11, followed by STARLabs SG with $242,500 25 points and Out Of Bounds with $9… …
… Gen6 SonicWall devices must be updated with the latest firmware, and then follow the remediation steps detailed in the vendor’s advisory : Delete the existing LDAP configuration using userPrincipalName in the “Qualified login name” field Remove locally cached/listed LDAP users Remove the configured… …
… Today's highlight was the attempt of Cheng-Da Tsai also known as Orange Tsai of DEVCORE Research Team, who was awarded $175,000 in rewards after chaining 4 logic bugs to achieve a sandbox escape on Microsoft Edge. …
… The campaign was initially discovered by Malwarebytes , whose researchers say that the 'Pro' installer is a trojanized copy of Claude that works as expected but deploys a PlugX malware chain in the background, giving attackers remote access to the system. …
… AI-assisted exploit build XBOW reports that creating the proof-of-concept PoC exploit was a seven-day challenge between the company's autonomous AI-driven development system, XBOW Native, and a human researcher assisted by a large language model. …