Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for remote code execution, credential theft, and cryptomining. AI infrastructure is now a cloud entry point. Over 90 days, attackers tailored techniques for services routing model …

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are making some phishing pages harder to track by changing the code delivered to every visitor. An examined operation served a credential-stealing form whose appearance stayed familiar while its structure kept shifting. The attack started with a phishing message …

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cyber incident reportedly forced a British power plant to halt operations for about four days in July, drawing attention to the security of less-visible energy sites. The shutdown did not cause customer outages, and the wider electricity system continued …

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies, and diplomatic organizations in Romania, Spain, and Türkiye. The campaign relied on Word documents designed to look routine or official, turning a familiar office file …

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort through 700GB of stolen corporate data every hour. The group says the system helps it quickly find information that can raise the pressure on victims, …

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a graduate-school application, then opens a genuine Word document while the …

Hackers Use Fake Student Resume to Secretly Install Malware on Researchers’ Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a graduate-school application, then opens a genuine Word document while the …

Russian University Leak Exposes GRU Cyber Training Pipeline Behind APT28 and Sandworm

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Leaked university records have opened an unusual window into Russia’s military cyber ecosystem. The documents point to a structured training program, not a newly discovered piece of malware, that appears to feed people into GRU units associated with APT28 and …

Dark Caracal Hackers Use Ethereum Blockchain to Keep New Malware Connected After C2 Disruption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dark Caracal has returned with a new tool that helps attackers stay connected when defenders shut down their control servers. The cyberespionage group is linked by researchers to a Venezuelan communications organization intrusion, where it deployed an unfamiliar Go-based malware …

Claude Code Opus 5 Auto Mode Hijacked via Prompt Injection to Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Claude Code Opus 5 in Auto Mode can be tricked into running malicious code via a simple website summary request. In a limited lab test, the attack reportedly succeeded in 60% to 80% of attempts. The finding from Embrace The …