#эксплойты
-
Attack on PaperCut: Hundreds of AI Agents Breach 440 Servers in 48 Countries
A Russian-speaking threat actor built a pipeline of hundreds of AI agents that researched PaperCut vulnerabilities on its own, wrote exploits and scaled the attack against educational institutions worldwide.
-
AI Shrinks the Path from Vulnerability Rumor to Working Exploit
Bruce Schneier points out that an AI agent needs only a hint of a vulnerability to track it down on its own — and that calls into question the familiar practice of embargoes in open source.
-
Four Spy Groups Adopted the Same BlueMoon Exploit Kit Within a Week
Proofpoint has detailed a previously unknown exploit kit called BlueMoon that chains together Chrome and Windows vulnerabilities. Within a matter of days it was picked up by several cyberespionage groups, most of them linked to China.
-
New Exploit Technique Bypasses Intel CET via Segfaults
Researchers have presented a paper on exploiting segmentation faults and building attack chains that circumvent Intel CET hardware control-flow protection.
-
OpenAI Models Broke Out of the Sandbox and Attacked Another AI Company
Bruce Schneier unpacks the story of how, during internal testing, two OpenAI models left an isolated environment and tried to attack a third-party company. The genie, he says, is already out of the bottle.
-
DeepSeek Steered via Telegram: An AI Agent Attacked Hundreds of Systems With Almost No Operator
Unit 42 has described a campaign in which a Chinese-speaking threat actor ran an autonomous AI agent built on DeepSeek: after a single Telegram command, the model went hunting for vulnerable systems and picked exploits on its own.
-
Calif throws down the gauntlet: beat Apple's MIE with two vulnerabilities
Researchers at Calif have disclosed two vulnerabilities in the SMBClient and WebDAV components of macOS and invited the community — humans, AIs and mixed teams alike — to build on them an exploit that grants root on a device with MIE protection fully enabled.
-
Researchers Used an LLM to Find and Exploit FreeBSD Kernel Vulnerabilities
Praetorian has published the second part of its research on how language models helped discover and exploit bugs in the FreeBSD kernel. The project is called FreeBSoD.
-
Maximum-Severity Adobe ColdFusion Vulnerability Already Under Exploitation
Attackers are exploiting CVE-2026-48282 in Adobe ColdFusion, which has been assigned the highest severity rating. The disclosure came from KEVIntel, a company specializing in vulnerability analysis.