Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Source: The Hacker News Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and M Read original
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Source: The Hacker News Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and M Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Source: The Hacker News Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper in Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original