Chinese AI Firms Abuse APIs, Prompt Injection and Proxy Networks to Distill U.S. Frontier AI Models
China-based AI firms are allegedly conducting large-scale campaigns to extract capabilities from leading U.S. artificial intelligence models, according to a joint cybersecurity advisory from...
Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Networks
The activity is separate from an earlier campaign involving Chinese-speaking operators, but shows a similar pattern: commercial AI models were used as operational tools...
Hackers Are Targeting AI Servers to Steal API Keys and Install Crypto Miners
Threat actors are increasingly targeting exposed AI infrastructure to steal model-provider API keys, abuse cloud-connected services, and deploy Monero cryptominers, according to new research...
TITAN Ransomware Uses AI to Analyze Stolen Data and Automate Double Extortion
TITAN, a ransomware-as-a-service (RaaS) operation active since May 2026, is promoting an on-premises artificial intelligence platform designed to analyze stolen corporate data and increase...
Aurora Ransomware Affiliate Uses Cursor AI to Plan Attacks Against 20+ Organizations
An exposed open directory has revealed months of activity linked to a Russian-speaking affiliate of the Aurora ransomware operation.
CloudSEK said the operator targeted...