
CyberStrikeAI agents used in Windows domain takeovers
Securelist says education networks in Africa and Latin America were taken from SQL Server to domain admin in days.
5 stories, newest first · one card per story

Securelist says education networks in Africa and Latin America were taken from SQL Server to domain admin in days.

Attackers abused a Viva Aerobus SQL Server to run commands and steal files, then exposed tools and data online.

GreyNoise and Blackpoint tracked an AI-assisted actor using OpenAI Codex and DeepSeek agents to exploit PaperCut flaws across 440+ instances in 48 countries.

UK ICO reprimands ACRO criminal records office after three undetected intrusions over two years exposed thousands of records, including domestic violence victims.

Picus Labs' Blue Report 2026, from 338 million attack simulations, finds defenses strong at the perimeter but blocking only 37% of post-compromise actions.
Today 1.6K readers · 2.4K views · 776 reads · all time 189K views