An AI Agent Was Left Alone for Five Days — It Came Back With 190,000 Stolen Gaming Logins
Criminals are pointing a leaked AI pentesting tool at vulnerable servers and barely touching the keyboard afterward. In two campaigns documented by Check Point, autonomous agents stole over...
This Ransomware Crew Pitches Itself Like a Startup — 80% Commissions, a Tor Dashboard, and Payouts in 24 Hours
A ransomware operation calling itself Dark Project is recruiting criminal affiliates with an 80/20 revenue split and a polished Tor-hosted management platform. Researchers have linked it to 38...
A WordPress Upgrade Bug Drew 240,000 Attack Attempts in Days — Here’s Why the Window Was So Narrow
Attackers fired off more than 240,000 exploitation attempts against a newly disclosed WordPress Core flaw within days of its patch release. The bug, rated 8.1 on the CVSS...
Chinese Hackers Tried to Detonate Ransomware Inside a SharePoint Server — Security Software Stopped It Cold
A China-linked crew known as Storm-2603 used Microsoft SharePoint's ToolShell flaws to plant a memory-only backdoor and chase it with Warlock ransomware. The encryption never ran, but the...
A 300-Character Password Can Unlock Alpine Linux Servers Thanks to an OpenSSH Quirk
A newly patched OpenSSH flaw lets attackers bypass password checks on Alpine Linux systems running musl without PAM, turning an oversized password into an accidental skeleton key for...
A Hacker’s Exposed Server Reveals How AI Chatbots Were Weaponized to Breach Korean Banks
An open directory left behind on a hacking campaign's own Hong Kong jump server exposed the AI tooling — including a hijacked Claude Code setup rerouted to DeepSeek...
A Ransomware Gang’s Sloppy Encryption Code Is Accidentally Saving Victims’ Data
Check Point researchers found that the latest build of HYFLOCK ransomware only encrypts the first 4KB of larger files, letting victims recover partial content from Office documents despite...
Backdoor Smuggled Through a Chinese Keyboard App’s Update Check Hits Six Countries
A China-aligned group dubbed SlippyNunchucks hijacked unencrypted update traffic from the popular Sogou Input Method keyboard app to plant a modular backdoor called DarkVigil on victims across Hong...