Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php uses AppAuthentication::verifyCode() with a used-code cache key derived from both the app authentication secret and the submitted TOTP code. This isolates the newest accepted timestep by code instead of by secret, allowing a previously issued app-based MFA code to be accepted after a newer code has already been used. Reuse of the exact same code was already prevented, but another code inside the accepted time window remained usable. An attacker who obtains the target account's password and one app-based MFA code can use that code for the remainder of the configured window, which is approximately four minutes with the default settings, even after the legitimate account holder logs in with a newer code. Email-based MFA is not affected. This issue is fixed in versions 4.12.6 and 5.7.6.
Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw
Forescout researchers conducted an experiment using Anthropic's Claude AI to port a remote code execution (RCE) exploit from one WAGO PLC model (750-852) to another (750-831). The original exploit targets a pre-authentication buffer overflow (CVE-2021-31886) in the Nucleus FTP server, allowing arbitrary ARM shellcode execution. The AI-assisted porting required extensive human oversight, several hours, and significant API costs. While the AI successfully confirmed the vulnerability and generated working payloads, attempts to develop a command-and-control implant resulted in bricking a device. This experiment highlights the potential for AI to reduce the marginal cost of exploit development across related targets but also the current limitations and risks involved.
Beginning in 2024, a financially motivated threat actor designated BREEZE COMET has conducted sophisticated operations targeting Brazilian financial services, retail, and eCommerce organizations. The group specializes in manipulating payment systems including Pix, STR, and Boleto to conduct fraudulent transfers worth tens of thousands of USD. Their evolved tactics leverage customized malware suites written in multiple languages including Rust, Nim, Golang, and Java, alongside compromised government websites for initial access and command and control. The threat actor demonstrates advanced capabilities by targeting banking software, payment APIs, and mTLS credentials while maintaining persistent access through multiple backdoors. Evidence indicates BREEZE COMET uses generative AI to accelerate malware development and script creation, suggesting potential expansion to other Latin American and African countries based on infrastructure replication observed in Nigeria, Paraguay, Ghana, and Venezuela.
A threat actor developed the Gryxa toolkit with substantial assistance from an AI coding agent, demonstrating how artificial intelligence lowers the skill barrier for creating sophisticated attack infrastructure. The actor operated across several hundred hosts despite lacking development experience, deceiving the AI agent by falsely claiming authorized testing purposes. Gryxa employs multiple persistence mechanisms including seven scheduled tasks, Windows event subscriptions, and redundant file copies, making it resilient to removal attempts. The toolkit includes monitoring capabilities that collect Windows logs and host artifacts after remediation attempts, potentially exposing defender tools and accounts. The actor iteratively improved the toolkit through 35 documented failed installations, working with the AI agent to enhance resilience. Organizations face challenges remediating devices outside centralized management, where Gryxa can rebuild faster than manual response efforts.
JSCeal is a sophisticated cryptocurrency-focused stealer malware delivered as compiled V8 bytecode executed by a bundled Node.js runtime. It employs multiple layers of JavaScript obfuscation and encryption, including RC4 and AES-256-CBC, to protect its payload. The malware's capabilities include keylogging, browser credential theft, cryptocurrency collection, HTTPS traffic interception via a local man-in-the-middle proxy, and session replay using stolen cookies. Recent variants target macOS and newer V8 versions, showing active development. Check Point Research developed a fully static deobfuscation pipeline to analyze JSCeal without executing it, enabling detailed understanding of its behavior. The toolkit is publicly available and supports analysis of multiple samples.
Cisco research reveals that AI model country-of-origin labels do not reliably indicate the model's true technical lineage or inherited behaviors. AI models often incorporate upstream dependencies through fine-tuning on existing checkpoints, causing them to inherit weights, biases, or behaviors from models originating in different countries. This phenomenon, called provenance entanglement, complicates risk assessment based solely on the labeled country of origin. Cisco suggests that AI models require a form of Software Bill of Materials (SBOM) to disclose lineage and dependencies for better security and regulatory oversight. The research highlights the need for transparency in AI model development to identify potential inherited vulnerabilities or biases.
Adobe DNG Software Development Kit (SDK) versions 1.7.1 2502 and earlier contain an out-of-bounds read vulnerability that may expose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.
Adobe DNG Software Development Kit (SDK) versions 1.7.1 2502 and earlier contain an out-of-bounds write vulnerability. This flaw can cause memory corruption leading to application crashes or unresponsiveness, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.
DaemonCore Linux is a Debian 13–based Linux distribution designed for authorized penetration testing, defensive security, incident response, forensics, and cybersecurity education. It includes a lightweight XFCE desktop, live USB boot with optional persistence, and a graphical installer. The distribution comes preloaded with a curated set of security tools for network discovery, wireless security, service assessment, web application testing, password auditing, forensics, reverse engineering, and development. Security defaults include a non-root live session, enabled firewall, disabled unnecessary network services, and common privilege escalation protections. The project is currently in early development and not yet a stable release. It is intended only for use on systems and networks with explicit authorization for testing.
A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensitive information such as system files and deployment configuration files containing credentials.
Palo Alto Networks Unit 42 analyzed 405 malware samples linked to AI and found that only 12 samples reached live production endpoints. Most AI-linked malware samples remain in testing or research environments and do not evade existing detection methods. The samples that reached endpoints triggered security alerts and spanned multiple malware families and countries. AI is currently used primarily to speed up malware development rather than to increase evasion or success rates.
Researchers at Kaspersky have identified the first malware specifically designed to target car head units, linking it to the BadBox botnet. The malware was found on an Android-based aftermarket infotainment system from the Chinese company DoFun, widely used in China and other APAC countries. Attackers exploited a vulnerability in the system's software update mechanism to deliver malicious Android applications that act as droppers, loaders, clickers, and reverse-proxy loaders. The malware supports multiple commands, primarily used to download a reverse proxy module, indicating its main purpose is to incorporate infected devices into a proxy botnet. The vendor has addressed the vulnerability after notification. The BadBox botnet has been active since at least 2023, primarily targeting Android devices such as TV boxes, and has grown to include millions of devices. This development shows an expansion of BadBox operators' delivery methods and targets to vehicle infotainment systems.
This content discusses the evolving threat landscape shaped by artificial intelligence accelerating vulnerability discovery and exploit development. AI has drastically shortened the window between vulnerability disclosure and exploitation, often enabling attackers to weaponize flaws before patches are available. Traditional vulnerability management programs, which rely on slower patch cycles, are increasingly ineffective. The attack surface is also expanding with AI components introducing new classes of vulnerabilities not covered by conventional scanning tools. The briefing cited recommends rapid, risk-driven patching, improved dependency management, and leveraging AI for proactive defense. It emphasizes that AI-accelerated attacks represent a lasting shift requiring security programs to adapt for speed and prioritization.
Bulletin ID: 2026-009-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 2026/03/17 12:15 PM PDT Description: Kiro is an AI-powered IDE for agentic software development. We identified CVE-2026-4295, where improper trust boundary enforcement allowed arbitrary code execution when a user opened a maliciously crafted project directory. Impacted versions: < 0.8.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
UAT-10147 is a sophisticated Chinese-speaking intrusion actor deploying a cross-platform backdoor named SPECTRE targeting IIS and Linux servers. SPECTRE integrates advanced post-exploitation features including process injection, credential theft, anti-analysis, and kernel-level EDR bypass via Bring Your Own Virtual Driver (BYOVD) techniques. The campaign combines SEO fraud monetization with custom malware, open-source tools, and AI-assisted development workflows. The Windows variant of SPECTRE uses runtime API resolution and string encryption to evade static detection and includes a comprehensive command set for system control and persistence. The Linux variant incorporates a kernel rootkit with similar advanced capabilities. The actor also uses in-memory web shells and sophisticated evasion methods. No patch or remediation is indicated in the available data.
SilkParasite is a cyberespionage operation assessed with medium confidence as China-nexus that targeted government bodies across Central Asia. Seven remote access tool families were deployed, five of which were previously undocumented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The toolset is small, modular, and professionally engineered with traces of AI-assisted development. Initial access occurred through malicious Microsoft Office documents delivered via spear-phishing, using regionally tailored lures impersonating government ministries. The operation leveraged DLL sideloading as the primary delivery mechanism and used Google Drive for command-and-control communications to hide within trusted services. Infrastructure analysis identified connections to China Unicom's backbone network, and operational patterns suggest a functioning software organization with maintained build pipelines and careful operational security.
Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode. Prior to 6.2.2, Grav Shortcode Core passes shortcode syntax through Security::detectXss() because it contains no literal less-than character, then ColorShortcode.php and related attribute handlers concatenate an attacker-controlled parameter into HTML without encoding. An account with admin.pages permission can close the generated attribute and add an event handler, creating stored cross-site scripting that executes for visitors or administrators who view the page. This issue is fixed in version 6.2.2.
The npm package 'dev-env-check' version 1.0.3 contains malicious code that executes during installation on Windows systems. It uses a postinstall hook to run a PowerShell command that downloads and executes a file named msedge_update.exe from a suspicious external URL, impersonating a Microsoft Edge update. The malicious behavior is obfuscated using XOR encoding with misleading comments. The package falsely advertises itself as a development environment validator but performs unauthorized remote code execution.
