Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۰۸:۳۰

Ransomware gang talked AI agents into doing much of its dirty work

The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as GOLD OGRE, recovered artifacts from the Cursor AI coding assistant in late August that show the attackers handing the agents VPN logins, proxy…

Malware & Threats Ransomware

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CyberInsider سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۲:۰۵

Apple warns German officials of targeted spyware attacks

Germany’s cybersecurity agency has warned that several members of parliament and other public figures received Apple alerts about targeted mercenary spyware attacks, urging recipients to treat their devices as potentially compromised. The Federal Office for Information Security (BSI) says the notifications began arriving on October 29, 2026. In a letter dated October 30, it informed … The post Apple warns German offi…

Malware & Threats Mobile Development

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۱:۱۳

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks. The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM. "These attacks aim to encrypt data and extort ransom," it said in a statement

Malware & Threats Vulnerabilities & Zero-Day Ransomware

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۰:۰۰

What human hackers still do better than AI, according to HackerOne’s CEO

AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, what AI does to the crowd model, and why routine medium-severity findings may pay less. She also covers the growing pile of AI-assisted submissions, how programs sort useful reports from spam, and which…

Vulnerabilities & Zero-Day Penetration Testing

Source

Security Affairs سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۵۴

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted by government-backed spyware. The warning follows Apple’s notifications, which began reaching iPhones on October 29, according to the federal cybersecurity office, the BSI. The BSI says members […]

Malware & Threats

Source