Jozu

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 28, 2026
Last mentioned2d ago

Timeline

1 articles · newest first

Attackers abuse enterprise AI tools for theft, C2, and agent hijacking

A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.

CSO OnlineOct 28, 08:25 UTC · 2d agoAI safety & securityCVE-2025-32711 CVE-2026-252531

Related CVEs

by mentions

CVE-2026-2525332%8.8
One-Click WebSocket Token Leak Enabling RCE in OpenClaw (Moltbot/Clawdbot)
published Feb 1, 2026openclawPoC ×4
CVE-2025-327117%7.5
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
published Jun 11, 2025microsoft 365 copilot

Appears with

Radwareorganization · 1
Grokai model · 1
OpenClawproduct · 1
ActiveCampaignvendor · 1
Microsoftvendor · 1
Claudeai model · 1
ChainDropmalware · 1
Helmet Securityorganization · 1
Shai-Huludmalware · 1
Postmarkproduct · 1
Microsoft 365 Copilotproduct · 1
SesameOpmalware · 1
OpenAIvendor · 1
Check Pointorganization · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.