… Instead, the technology was used to accelerate the iterative process of developing, testing, and refining payloads against security products. AI tools are shortening the period between the publication of offensive security research and its practical implementation by threat actors. …
… However, some reports in April indicated that users were directed to the malicious domains after interacting with AI-based assistants. “In these cases, users querying AI chatbots for software download recommendations were presented with links to attacker‑controlled domains within generated response… …
… Download Now Related Articles: Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own Microsoft warns of Exchange zero-day flaw exploited in attacks Google: Hackers used AI to develop zero-day exploit for web admin tool Microsoft n… …
… Download Now Related Articles: GitHub investigates internal repositories breach claimed by TeamPCP 7-Eleven confirms data breach claimed by the ShinyHunters gang Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confirms secu… …
… Other successful attempts include k3vg3n chaining 3 bugs to take down LiteLLM $40,000 , Satoki Tsuji and haehae exploiting NVIDIA Megatron Bridge zero-days $20,000 , Compass Security and maitai of Doyensec hacking OpenAI's Codex coding agent each earning $40,000 , haehae dropping a Chroma zero-day … …
… Get the whitepaper Related Articles: New Shai-Hulud attack trojanizes 19 science-focused PyPI packages New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New IronWorm malware hits 36 packages in npm supply-chain attack Gr… …
… Tycoon2FA adds device-code phishing According to new research from managed detection and response company eSentire, Tycoon2FA confirms that device code phishing has become highly popular among cybercriminals. “The attack begins when a victim clicks a Trustifi click-tracking URL in a lure email and … …
… Download Now Related Articles: GitHub confirms breach of 3,800 repos via malicious VSCode extension GitHub investigates internal repositories breach claimed by TeamPCP TeamPCP hackers advertise Mistral AI code repos for sale Grafana breach caused by missed token rotation after TanStack attack 7-Ele… …
… Security researchers at Arctic Wolf reported on Kali365 activity in April after observing a widespread campaign targeting organizations worldwide. …