Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Networks
The activity is separate from an earlier campaign involving Chinese-speaking operators, but shows a similar pattern: commercial AI models were used as operational tools...
Hackers Are Targeting AI Servers to Steal API Keys and Install Crypto Miners
Threat actors are increasingly targeting exposed AI infrastructure to steal model-provider API keys, abuse cloud-connected services, and deploy Monero cryptominers, according to new research...
TITAN Ransomware Uses AI to Analyze Stolen Data and Automate Double Extortion
TITAN, a ransomware-as-a-service (RaaS) operation active since May 2026, is promoting an on-premises artificial intelligence platform designed to analyze stolen corporate data and increase...
Aurora Ransomware Affiliate Uses Cursor AI to Plan Attacks Against 20+ Organizations
An exposed open directory has revealed months of activity linked to a Russian-speaking affiliate of the Aurora ransomware operation.
CloudSEK said the operator targeted...
Linux Botnet Uses NVIDIA NIM to Turn Host Telemetry Into Actionable Attack Commands
ToxNetV2, an AArch64 Linux peer-to-peer botnet, has integrated an LLM into its controller workflow, allowing host and botnet telemetry to be converted into structured...