North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.

Researchers uncover wormable XMRig campaign using BYOVD exploit and LLM-built React2Shell attacks hitting 90+ hosts.

A low-skilled threat actor was able to do a lot with the help of AI, Amazon researchers warn.

最近，复旦大学肖仰华教授的朋友圈引起了热议，其在研发测试的 AI 智能体通过自主学习学会了操作微信，在朋友圈发消息并与其好友在评论区自主互动。面对自然的互动，不少好友甚至开始要求 “证明你真的是肖老师，而不是他的 AI”。 这种 “分不清真人与 AI” 的错觉，源于A3 实验室（Advantage AI Agent 实验室，由深圳夸夸菁领科技有限公司与复旦大学知识工场实验室联合成立的科研团队）研发 ...

Generative AI tools analyzed target networks and wrote exploit code, enabling an opportunistic attacker to have an outsized ...