Threats Tagged 'ai'

The threat intelligence report from September 14, 2026, details multiple cyber incidents including data breaches, vulnerabilities, and AI-related threats. Notably, a data breach at Mathspace was caused by exploitation of CVE-2026-72898, a SQL injection vulnerability in the self-hosted Metabase tool, exposing user names, emails, usernames, and locations. Other significant vulnerabilities include Microsoft’s Patch Tuesday addressing 974 flaws including privilege escalation zero-days, and GitLab’s critical path traversal vulnerability CVE-2026-85706 allowing unauthenticated arbitrary file reads. MikroTik RouterOS vulnerabilities enabling passwordless SSH and privilege escalation were also fixed. The report includes AI threats involving prompt evasion and sandbox escapes. Check Point IPS provides protections for several mentioned vulnerabilities. The report does not specify affected versions for CVE-2026-72898. No CVSS score is provided for this vulnerability.

An attacker operates a semi-autonomous coding agent that identifies poorly secured large language model (LLM) resale gateways, acquires API access through common web vulnerabilities and account farming, validates the inference capacity, and aggregates it behind a single unified gateway. This creates a partially self-expanding supply chain of stolen inference capacity, where the agent continuously harvests and consolidates LLM access to support further operations. The attacker’s infrastructure includes hundreds of compromised endpoints mapped to standard model names, served through a single proxy with failover and load balancing. The operation was uncovered through an AI honeypot that captured the agent’s operational playbook and infrastructure details.

The CyberAgents Exchange AI Inspector is a new security review process developed by Tenable in partnership with OpenAI to rigorously vet community-submitted AI agents, skills, MCP servers, and multi-agent playbooks. It combines Tenable's exposure detection expertise with OpenAI's GPT Cyber models and human oversight to analyze a broad attack surface unique to AI agents, including LLM instructions, tool-chaining permissions, and prompt injection risks. The inspection process dynamically matches AI model tiers to submission risk levels, ensuring thorough vetting without excessive computational overhead. This initiative aims to help security teams confidently adopt agentic AI by providing a cybersecurity-native registry with a transparent and comprehensive review process. The CyberAgents Exchange launched as an open-source, vendor-agnostic registry and has grown to host over 100 AI listings. The AI Inspector is expected to be available in September and anchors reviews to specific code commits to maintain traceability and integrity.

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

GPUThor is a new Rowhammer attack technique targeting Nvidia Ampere GPUs with GDDR6 memory, significantly increasing the effectiveness of bit flips in video memory. It exploits a hardware behavior where repeated memory access can corrupt data in neighboring cells, bypassing standard defenses like Target Row Refresh (TRR). The attack can cause double and triple-bit errors, which are not fully corrected by ECC memory, leading to denial of service conditions such as GPU reboots and hardware faults. While arbitrary code execution has not been demonstrated, the attack shows a theoretical potential to compromise industrial GPUs and cloud infrastructure using such accelerators.

This content is an analytical discussion from Cisco Talos about the challenges in producing actionable threat intelligence and the operational hurdles posed by AI safety guardrails in cybersecurity defense. It highlights how AI models with restrictive guardrails can impede legitimate forensic and defensive tasks, while adversaries exploit unconstrained AI models for attacks. The piece emphasizes the need for security teams to regain control over AI capabilities to maintain an advantage against attackers. It also shares insights into adversary engagement and the human factors influencing cybercriminal behavior.

This content is an educational analysis discussing how artificial intelligence, specifically large language models (LLMs), work and how children can be taught to use AI tools responsibly for schoolwork. It highlights the limitations of AI, such as hallucinations (incorrect or misleading answers), language biases, and the challenges AI faces when processing large amounts of information. The article emphasizes the importance of understanding AI's capabilities and shortcomings rather than banning its use.

A publicly exposed inference honeypot mimicking large language model (LLM) endpoints was discovered and repurposed by an adversary as part of an infrastructure offering "free" LLM backends. The honeypot received a genuine coding-agent session including sensitive context such as session history, filesystem outputs, working directories, and local tool manifests. No tool execution was triggered by the honeypot itself; however, the information exposed demonstrates what a malicious operator controlling such an endpoint could access or manipulate.

JSCeal is a sophisticated cryptocurrency-focused stealer malware delivered as compiled V8 bytecode executed by a bundled Node.js runtime. It uses multiple layers of JavaScript obfuscation and compilation to evade analysis. The malware includes capabilities such as keylogging, browser and credential theft, screenshot capture, and HTTPS traffic interception via a local man-in-the-middle proxy. Check Point Research developed a static deobfuscation pipeline to analyze JSCeal without execution, enabling detailed understanding of its behavior and evolution. The malware targets multiple platforms including macOS and continues to evolve with new payload encryption and targeting techniques.

A federal judge ruled that the Pentagon's designation of AI company Anthropic as a supply chain risk was illegal and baseless. The ruling found that the government's actions were retaliatory, based on Anthropic's criticism of the Department of Defense's AI policies rather than any concrete security concerns. This legal dispute highlights tensions over AI use in military applications and government attempts to restrict Anthropic's technology. The Pentagon is expected to appeal the decision. No direct technical vulnerability or exploit is involved in this case.