Threat actor CyberXero has weaponised Anthropic's Claude Code in a cyber campaign that compromised more than 628,000 Ukrainian records. The group combined the AI engine with Cobalt Strike to breach infrastructure targets.

Threat actor CyberXero has weaponised Anthropic's Claude Code in a cyber campaign that compromised more than 628,000 Ukrainian records. The group combined the AI engine with Cobalt Strike to breach infrastructure targets.
π¨New ransom group blog post!π¨
Group name: dragonforce
Post title: Canadian Mennonite University (CMU)
Organization: Canadian Mennonite University
Location: π¨π¦ None
Sector: Education
#ransomware #cti #threatintelligence #cybersecurity #infosec
Security Tip: Stop guessing which CVEs to patch first. π‘οΈ Use the CISA Known Exploited Vulnerabilities (KEV) catalog to prioritize patches. If it's being exploited in the wild, it's a priority. Track active threats and CVE details at https://cvedatabase.com #InfoSec #CyberSecurity
π¨ EUVD-2026-97318 π 6.9/10 π’ agno-agi π A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97318 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-97319 π 5.3/10 π’ agno-agi π A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_d... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97319 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2025-25755 π 3.8/10 π’ Arista Networks π On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accountin... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25755 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-64918 π 7.2/10 π’ Red Hat π A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by jo... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64918 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-97320 π 5.3/10 π’ Tencent π A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go ... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97320 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-97321 π 6.9/10 π A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97321 #cybersecurity #infosec #cve #euvd
ASN: AS33651
Location: Richmond, US
Added: 2026-10-05T20:02
ASN: AS4766 Korea Telecom
Country: KR
City: Iksan
State: Jeollabuk-do
Scanned: 2025-05-06T10:17:10
https://computernewb.com/vncresolver/browse#id/52070905
Certificati veri per domini falsi: lβhijack di tre ccTLD che ha permesso di impersonare Google e YouTube
il blog: insicurezzadigitale.com/certificati-...
#cybersecurity #cctldhijack #certificatetransparency #dns #google #infosec #letsencrypt
π¬ Il forum: internet-forum.it/t/stanza-sec...
π What We Missed: FBI Strikes Back at ShinyHunters
via Dark Reading
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
#cybersecurity #infosec #threatintel
π Supreme Court to Rule on Compensation in Data Breach Claims - Kennedys Law LLP
Supreme Court to Rule on Compensation in Data Breach Claims Kennedys Law LLP
https://tinyurl.com/2ab5dq55 #CyberSecurity #InfoSec #CrustyTLDR
π Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access - CyberSecurityNews
Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN A...
https://tinyurl.com/24pe5dgu #CyberSecurity #InfoSec #CrustyTLDR
π¨ EUVD-2026-97294 π 5.1/10 π A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. Th... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97294 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2023-60710 π 6.5/10 π’ Pluggabl LLC. π Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows ... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60710 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-97295 π 6.5/10 π’ DLX Plugins π Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks post-type-archiv... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97295 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-97296 π 5.3/10 π’ Codection π Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly C... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97296 #cybersecurity #infosec #cve #euvd