Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
CyberXero, a Russian-speaking initial access broker, has launched a dual-pronged campaign targeting WordPress sites and Ukrainian critical infrastructure, leveraging AI tools like Claude Code. The operation has led to the exfiltration of over 628,000 records from Ukrainian entities, with confirmed c...
Acronis Threat Research Unit has identified a new malware campaign named PATCHCORD, targeting Afghan telecom providers and critical infrastructure in South Asia. The malware, a custom backdoor written in C/C++, is delivered through fake VPN installers impersonating Afghan Telecom. The campaign also...
Unit 42 has identified a cyber campaign, tracked as CL-UNK-1211, targeting government entities and state-affiliated infrastructure from October 2025 to April 2026. The attackers utilized AI-generated code to deploy web shells, credential stealers, and custom malware aimed at accessing government ema...
OpenAI has introduced GPT-5.4-Cyber, a specialized AI model for defensive cybersecurity, available only to vetted professionals through its Trusted Access for Cyber (TAC) program. This model is designed to facilitate advanced tasks such as binary reverse engineering and vulnerability analysis with f...
