N-able security advisory (AV26-1143)

Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears

Palo Alto Networks Unit 42 is reporting today that it has tracked a massive China-based attack leveraging the open-source AI penetration testing framework Cairn to autonomously conduct 25 operations against at least 19 organizations. The attackers weaponized Cairn by pairing it with Chinese AI models Zhipu GLM and DeepSeek, Unit 42 said. The report said it monitored the attacks in August and September 2026 in which t…

VU#685399: PromZard context key code injection leads to remote code execution

Overview The npm library promzard, versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library designed to automate configuration workflows by evaluating template modules and generating data objects via interactive prompting. The library allows users to provid…

HPE security advisory (AV26-1144)

Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets. The post Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors appeared first on Unit 42.