Search: “industry”

5,983 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 2654 Ransomware 1066 Policy & legal 600 Data breach 499 Vulnerability 386 Malware 292 Threat actor 283 Phishing & fraud 168 Advisory 29 AI safety & security 17 Model release 1

SeverityAll critical 5821 high 155 medium 18 low 0 info 1

Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild

Attackers actively exploit CVE-2025-32433, a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH, heavily targeting OT and critical infrastructure networks.

CVE-2025-32433 enables unauthenticated RCE in Erlang/OTP's SSH daemon via SSH connection protocol messages (codes >= 80) processed before authentication, affecting versions before OTP-27.3.3, OTP-26.2.5.11 and OTP-25.3.2.20. Unit 42 recorded a spike in exploitation between May 1-9, 2025, with 70% of detections on firewalls protecting OT networks, disproportionately affecting healthcare, agriculture, media and high technology. Observed payloads bind TCP-connected shells or launch Bash reverse shells to hosts like 146.103.40.203:6667, with randomized DNS lookups under dns.outbound.watchtowr.com indicating OAST-driven blind RCE validation.

Palo Alto Unit 42Aug 17, 13:03 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2025-32433

Protecting the Manufacturing Industry With Threat Intelligence

Recorded FutureSep 1, 00:00 UTC · Sep 1, 2025Data breach in the wild

Protecting the Retail Industry With Real

Recorded FutureAug 25, 00:00 UTC · Aug 25, 2025Data breach in the wild

Industrial Defender 8.0 offers detailed view of OT environments

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2025Exploit / PoC in the wild

The impact of the Log4j vulnerability on OT networks

Help Net SecurityDec 16, 00:00 UTC · Dec 16, 2021Vulnerability in the wildCVE-2021-44228

Dragos raises $110 million from Koch Industries, Saudi Aramco, National Grid investment arms

CyberScoopDec 8, 11:20 UTC · Dec 8, 2020Ransomware in the wild

Report: Manufacturing bears the brunt of industrial ransomware

CyberScoopFeb 20, 10:00 UTC · Feb 20, 2024Ransomware in the wild

Electric power industry puts cybersecurity to forefront with Trump, lawmakers

CyberScoopMar 28, 21:53 UTC · Mar 28, 2017Exploit / PoC in the wild

Industry steps up on IoT cybersecurity — is it enough?

CyberScoopSep 23, 09:30 UTC · Sep 23, 2016Exploit / PoC in the wild

China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies

NSA, CISA, and FBI warn DeepSeek, Alibaba, and other Chinese AI firms ran industrial-scale distillation of U.S. frontier models, threatening U.S. AI leadership.

A joint NSA, CISA, and FBI Cybersecurity Advisory (AA26-251A) says China-based firms DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens from U.S. frontier models including Claude, GPT, Gemini, and Grok, likely with Chinese government knowledge. Campaigns running since at least late 2024 used native APIs, cloud providers, third-party aggregators, gray-market proxy "transfer stations", and shared premium subscriptions to bypass geographic restrictions, evade safeguards, and violate providers' terms of use. The agencies recommend detecting anomalous prompts, accounts, and usage patterns; subtly altering responses to suspected distillers; and cross-organization intelligence sharing. They also call DeepSeek's publicly cited $5.6M training cost misleading because it excludes data acquired through distillation.