Mimikatz

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenAug 13, 2026
Last mentionedSep 10, 2026

Timeline

4 articles · newest first

Hackers Steal Active Directory Password Hashes Without Attacking Domain Controllers Directly

Attackers use the DCSync technique to impersonate domain controllers and harvest AD password hashes and Kerberos keys without directly compromising domain controllers, Trellix warns.

GBHackersSep 10, 12:00 UTC · Sep 10, 2026ResearchExploited3 · 1 read

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

GreyNoise and Blackpoint tracked an AI-assisted actor using OpenAI Codex and DeepSeek agents to exploit PaperCut flaws across 440+ instances in 48 countries.

The Hacker NewsSep 10, 11:41 UTC · Sep 10, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-820781

Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide

A Russian-speaking actor used hundreds of AI agents to exploit PaperCut flaws, compromising 440 servers across 395 organizations in 48 countries.

Cyber Security NewsSep 9, 14:40 UTC · Sep 9, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+15 · 2 reads

Storm-1175 Replaces Medusa With New StormEncryptor Ransomware

Microsoft reports China-linked ransomware group Storm-1175 switched from Medusa to a new C++ strain, StormEncryptor, likely exploiting N-able flaw CVE-2026-18577.

Security AffairsAug 13, 08:09 UTC · Aug 13, 2026RansomwareExploitedCVE-2026-18577 CVE-2026-1731 CVE-2023-21529+153 · 1 read

Related CVEs

by mentions

CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2025-5269186%10.0
Unauthenticated Arbitrary File Upload RCE in SmarterTools SmarterMail
published Dec 29, 2025SmarterTools SmarterMailKEVRansomwarePoC ×2
CVE-2025-31161100%9.8
Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
published Apr 3, 2025CrushFTPKEVRansomwarePoC ×5
CVE-2026-2376096%9.3
Unauthenticated Admin Password Reset Bypass in SmarterTools SmarterMail
published Jan 22, 2026SmarterTools SmarterMailKEVRansomwarePoC ×2
CVE-2023-2152959%8.8
Authenticated Deserialization RCE in Microsoft Exchange Server (CVE-2023-21529)
published Feb 14, 2023Microsoft Exchange ServerKEVRansomware
CVE-2024-170895%8.4
Path Traversal RCE in ConnectWise ScreenConnect (CVE-2024-1708)
published Feb 21, 2024ConnectWise ScreenConnectKEVRansomwarePoC
CVE-2021-4228777%7.5
Privilege Escalation in Microsoft Active Directory Domain Services
published Nov 10, 2021microsoft windows server 2004KEVRansomware
CVE-2024-5772797%7.5
Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier
published Jan 15, 2025SimpleHelp (remote support/remote access software)KEVRansomware
CVE-2024-27199100%7.3
Path Traversal in JetBrains TeamCity Allows Limited Admin Actions
published Mar 4, 2024JetBrains TeamCityKEVRansomwarePoC

Appears with

Impacketproduct · 4
US high schoolvictim · 2
PaperCutvendor · 2
DeepSeekvendor · 2
GreyNoiseorganization · 2
OpenAIvendor · 2
Certipyproduct · 2
Rubeusproduct · 2
DeepSeekai model · 2
PaperCut NG/MFproduct · 1
Advanced IP Scannerproduct · 1
PaperCut MFproduct · 1
Windowsproduct · 1
StormEncryptormalware · 1
N-ablevendor · 1
Netlas.iovendor · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned Sep 10, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.