60
60
45
60
60
45
60
60
60
60
60
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets
GreyNoise observes scanners spoofing OpenAI, Anthropic, and DeepSeek crawler user agents to hunt leaked credentials and secrets.
GreyNoise is observing automated scanners that pose as the web crawlers of OpenAI, Anthropic, DeepSeek, and Fortune 500 companies. The scanners use forged user agents while requesting files where misconfigured web servers frequently leak secrets and credentials. This activity abuses trust in AI crawler traffic to discover exposed credentials for follow-on attacks.
58
60
50
60
60
60
60
60
Microsoft Fixes Two Zero
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
60
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers
60
60
60
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
60
60
U.S. CISA adds Microsoft Windows and Rejetto HTTP File Server bugs to its Known Exploited Vulnerabilities catalog
60
60
60
60
60
60
60
60
60
45
Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
60
60
60