Bloglab.360 AI-Driven Cyber Attacks Target Financial Sector and Cloud Services
Article Content
- •GMO Internet's Onamae cloud service faced unauthorized access, impacting customer data security.
- •Zscaler identified an AI-assisted attack on South Korean financial institutions, affecting 67,000 records.
- •Multiple AI-driven threats, including phishing and malware, are exploiting vulnerabilities in cloud services.
On October 27, GMO Internet reported unauthorized access to its Onamae cloud desktop service, with attackers claiming to have stolen sensitive information. The service was suspended on October 21, and the company is assessing the impact, which may affect business continuity and customer data protection. Concurrently, Zscaler ThreatLabz revealed an AI-assisted attack on South Korean financial institutions, exploiting vulnerabilities to access personal data of approximately 67,000 individuals. This attack utilized the ARTEX penetration testing framework for reconnaissance and data exfiltration. Additionally, various AI-driven threats were identified, including phishing schemes impersonating AI brands and malware leveraging AI for evasion tactics. The situation remains fluid, with ongoing investigations into the authenticity of the claims made by attackers.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-41940 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What information was compromised in the Onamae incident?
How many records were affected in the Zscaler report?
What should organizations do to protect against these threats?
Continue Reading
Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure… 
Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both…