Search: “I&C Secure”

338 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1715 Vulnerability 954 Ransomware 843 Exploit / PoC 414 Threat actor 340 Data breach 296 Policy & legal 248 Industry 228 Phishing & fraud 173 Research 43 Advisory 42 AI tools & infra 37 AI safety & security 33 Tools 30

SeverityAll critical 1659 high 2040 medium 1211 low 414 info 116

Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

AI-orchestrated campaign exploited PaperCut NG/MF RCE (CVE-2026-81578/82078), compromising 440+ instances at 395 organizations in 48 countries.

GreyNoise tracked a likely Russian-speaking actor using AI (OpenAI Codex harness plus a DeepSeek model) to develop, test, and deploy exploits for PaperCut NG/MF (CVE-2026-81578, CVE-2026-82078) starting 31 August 2026. The actor compromised at least 440 PaperCut instances across 395 organizations in 48 countries, achieving domain admin at 12 victims — fastest time to domain admin was five minutes and a US high school was fully compromised in seven minutes. Attack paths involved LSASS memory and registry secret harvesting, pass-the-hash to domain controllers, noPac attacks, account additions to Domain Admins, and DCSync to exfiltrate full NTDS.DIT credential dumps. Impact scope suggests access development potentially for handoff, with prior PaperCut intrusions historically leading to extortion.

GreyNoiseSep 9, 00:00 UTC · 8d agoThreat actor in the wildCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+1 CVEs1

SOC files: an APT41 attack on government IT services in Africa

Kaspersky SecurelistJul 21, 08:00 UTC · Jul 21, 2025Threat actor

Satellite Turla: APT Command and Control in the Sky

Kaspersky SecurelistSep 9, 09:58 UTC · Sep 9, 2015Threat actor

Chinese APT17 exploits Microsoft's TechNet to Host C&C IPs

Security AffairsAug 27, 16:19 UTC · Aug 27, 2017Threat actor

Kaspersky Lab discovered the cyber espionage campaign "Red October"

Security AffairsAug 12, 17:52 UTC · Aug 12, 2019Threat actor CVE-2009-3129 CVE-2010-3333 CVE-2012-0158

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

The Hacker NewsMay 11, 16:52 UTC · May 11, 2023Threat actor

US charges Assange with 17 counts under Espionage Act

Help Net SecurityMay 24, 00:00 UTC · May 24, 2019Threat actor

Kubernetes security: Shift-left strategies and simplifying management

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2022Threat actor

Cybersecurity needs a leader, so let’s stop debating and start deciding

Help Net SecurityFeb 25, 00:00 UTC · Feb 25, 2025Threat actor

China Telecom used BGP hijacking to redirect traffic worldwide

Security AffairsNov 8, 15:20 UTC · Nov 8, 2018Threat actor

Russian telco Rostelecom hijacks traffic for IT giants, including Google

Security AffairsApr 6, 10:47 UTC · Apr 6, 2020Threat actor

Half of Execs Request Security Bypass Over Past Year

Infosecurity MagazineOct 31, 10:30 UTC · Oct 31, 2023Threat actor

When Your $2M Security Detection Fails: Can your SOC Save You?

The Hacker NewsNov 26, 11:55 UTC · Nov 26, 2025Threat actor

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Microsoft tracks a counterfeit software-installer campaign compromising multinationals' China operations, moderately linked to the Silver Fox (Yinhu) actor.

Microsoft Defender Experts is tracking an active campaign using spoofed software download sites for brands such as Razer, Kaspersky, Microsoft Edge, Calibre, and Baidu Netdisk on .com.cn and .hl.cn domains, delivering installer archives whose hashes change per download, indicating server-side payload generation. The implants establish persistence, weaken security protections, and communicate with attacker-controlled infrastructure, with confirmed compromises across healthcare, manufacturing, gaming, technology, logistics, government, and education. Microsoft assesses with moderate confidence that the activity matches the publicly reported Silver Fox (Yinhu) fake software campaign; it has not attributed it to a nation-state actor.