ZeroHour

Search: “Booz Allen”

12 stories

Claude Mythos only model to complete full cyber kill chain, experts say

Booz Allen's Cyber Weapon Index finds only Claude Mythos completed an autonomous full cyber kill chain; mainstream AI-driven attacks deemed imminent.

Booz Allen's first Cyber Weapon Index tested 18 US and Chinese AI models on autonomous offensive cyber capability, combining vulnerability research and kill-chain attainment scores. Anthropic's Claude Mythos topped the index at 80 and was the only model to autonomously complete a full cyber kill chain, achieving administrator access with stolen credentials in every attempt and full domain compromise even without credentials; Grok-4.5 (49), GPT-5.6 Sol (46), Muse Spark 1.1 (38), and Kimi K3 (38) followed. All nine frontier API models scored zero against real-world bugs versus near-ceiling scores on planted ones, and pairing Claude Sonnet with a well-built attack harness rivaled Mythos' performance. Booz Allen predicts most tested models will reach Mythos' weaponization level within six months, calls AI-enabled mainstream attacks imminent, and urges sector-specific critical-infrastructure resilience deadlines and US cyber 'overmatch'.

Bisonal Malware Used in Attacks Against Russia and South Korea

Unit 42 details a Bisonal malware variant, active since 2014, targeting Russian and South Korean defense organizations via PDF-disguised spearphishing emails.

In early May, Unit 42 discovered a campaign delivering a Bisonal malware variant against at least one Russian communications security and cryptography company and one unidentified organization in South Korea. The variant, in the wild since at least 2014, introduces a new C2 cipher and rewritten networking and persistence code, with only 14 samples collected to date. Attackers spoofed Russian state corporation Rostec in spearphishing emails carrying an executable disguised with a PDF icon; the dropper decrypts an RC4-encrypted DLL and establishes persistence via a registry Run key. Bisonal has been used since 2013 against government, military, and defense targets in South Korea, Russia, Japan, and India, alongside successors Bioazih and Dexbia.

Palo Alto Unit 42 · Aug 17, 2026Malware in the wild