Tag
News and blog posts tagged Threat Intelligence on AppSecNews.
News Vulnerabilities & Zero-Days
BeyondTrust has patched CVE-2026-102764, a critical flaw in Remote Support that Google's Mandiant says a suspected China-nexus espionage group it calls ARMORY CASTLE exploited as a zero-day from late August 2026. Self-hosted appliances need to be patched manually.
Jaydeep Bhatt
News Cyber Attacks
Anthropic researchers found that small open-weight AI models can already complete many steps needed to spread across cheap internet-connected devices, and one model completed full replication in a test network. They estimate a small model could reach that level by the end of 2026.
Jaydeep Bhatt
News Cyber Attacks
CrowdStrike says a likely financially motivated, Chinese-speaking attacker used the ARTEX AI pentesting agent and AI coding tools in a campaign against South Korean financial institutions. Shinhan Bank says about 25,000 customers were affected; Korean police are investigating.
Jaydeep Bhatt
News Cyber Attacks
South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Citrix has released emergency security updates for a high-severity NetScaler vulnerability, CVE-2026-88779, after confirming that attackers are exploiting the flaw in targeted attacks. The vulnerability can cause denial-of-service on affected NetScaler deployments using SAML authentication.
Jaydeep Bhatt