Wiz says AI agents are running hands-on intrusions
Named cases include ARTEX at Korean banks and ConnectWise, Hermes at Thailand's finance ministry, and AI-assisted API attacks in Japan.
68
Organization
JPCERT/CC
- Mentions · 7d0
- Mentions · 30d7
- All mentions10
- First seenSep 21, 2026
- Last mentioned13d ago
Timeline
10 articles · newest firstWiz says AI agents are doing hands-on intrusion work
Named cases include ARTEX and Hermes, plus three Wiz investigations that begin with an exposed Flowise service.
68
Japan cyber incident reports rose 48% in Q3 2026
Insikt Group counted 918 reports, up from 621, alongside multi-million-record breaches and an IDCFrontier ransomware outage.
78
Exploited SiteGuard flaw can yield root; patch may wipe traces
Save SiteGuard diagnostic data before upgrading; JVN confirmed in-the-wild use but published no attacker indicators.
74
Attackers exploit SiteGuard WAF command injection for root or SYSTEM
CVE-2026-106931 is in the default statistics function; fixed builds are 8.00 Update 5 and 7.00 Update 6.
76
SiteGuard WAF command injection CVE-2026-106931 exploited in the wild
A local low-privilege user can run commands as root or SYSTEM through the default statistics feature; patched builds are out.
74
Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
CVE-2026-106931 is in the default statistics feature; JPCERT and the vendor say abuse is already confirmed.
82
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
JPCERT/CC warns of a surge in Japanese web data leaks via mobile API abuse and Metabase SQL injection.
88
Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware
Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.
80
Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers
Attackers exploited critical cPanel CVE-2026-41940 on hosting servers, deploying Mirai variants and ransomware.
85
Related CVEs
by mentions- CVE-2026-1069313%8.5OS command injection in SiteGuard Server Edition
- CVE-2026-7289898%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2026-4194099%9.3Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
Appears with
- SiteGuard Server Editionproduct · 4
- EG Secure Solutionsvendor · 3
- IPAorganization · 3
- WHMproduct · 2
- ConnectWisevendor · 2
- Hunt.ioorganization · 2
- cPanelproduct · 2
- Macnicaorganization · 2
- Thailand Ministry of Financevictim · 2
- ARTEXmalware · 2
- Flowiseproduct · 2
- Hermesmalware · 2
- Miraimalware · 2
- cPanelvendor · 2
- Metabaseproduct · 2
- Wizorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.