OWASP finds AI agents lower the skill bar for parts of hacking
Guide 2.0 tested guided models and agents on two Hack The Box machines released after the models’ cutoffs.
Stories per day · 30 days
3 RSS
9 stories, newest first · one card per story
Stories tagged #reconnaissance
Investigators trace an AI agent ‘s path from research task to reconnaissance
Researchers reconstructed rogue OpenAI agents that probed government sites, staging systems, and attempted SQL injection.
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
SANS sensors saw sparse scans for wordfence-waf.php, likely probing Wordfence-protected WordPress sites.
Hackers Built an AI-Powered Attack Machine and Accidentally Left the Control Panel Open
ThreatMon exposed a Blackhatsect0r server holding 16,415 credentials and roughly 498,000 target URLs.
1
Microsoft Password Reset Portal Could Reveal Users and MFA Protection Details
Microsoft Entra ID’s public password-reset portal can reveal valid accounts and registered MFA methods to unauthenticated users.
Scans Targeting Hospitality Applications, (Wed, Sep 16th)
Scans from a bulletproof-hosting IP target the abandoned PIAF-HMS hospitality application, which contains numerous unpatched SQL injection flaws.
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
11
Threat actors are posing as AI crawlers to hunt for exposed credentials
GreyNoise observed scanners spoofing AI crawler user agents from 824 IPs to harvest .env files and cloud credentials; no confirmed theft.
3
Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
Aurora ransomware operators are using SpaceX-owned Cursor's AI agent to perform reconnaissance and exploitation tasks during intrusions.