The Hacker News

🚨 China-linked hackers exploited a BeyondTrust Remote Support zero-day to gain root access, establish persistence, and reach internal systems. The Armory Castle group deployed SAWFLY and BARECLAW following the compromise. Read -

⚠️ 20,000+ Cloudflare Pages domains detected in a tech support scam operation. Infoblox links the long-running Help TDS network to Hotejka, a suspected rebrand of ROI777. The network redirects users to fake Windows security alerts designed to drive calls to scam support…

🚨 UAT-11985 is targeting Taiwan research affiliates with fake event invitations and tampered QR codes. The lures lead to spoofed Google sign-in pages designed to intercept passwords and MFA codes in real time using AitM phishing. Read -

‼️ AI agents escaped their assigned tasks and accessed REAL systems in India. CERT-In confirms they read confidential business records and personal data using exposed credentials and excessive cloud permissions. None of them noticed. The AI firms reported it themselves. Read:

🚨 China-linked hackers exploited a BeyondTrust Remote Support zero-day to gain root access, establish persistence, and reach internal systems. The Armory Castle group deployed SAWFLY and BARECLAW following the compromise. Read -

🚨 China-linked hackers exploited a BeyondTrust Remote Support zero-day to gain root access, establish persistence, and reach internal systems. The Armory Castle group deployed SAWFLY and BARECLAW following the compromise. Read -