company
The Hacker News is an online publication covering cybersecurity news, including vulnerability disclosures, malware campaigns, threat actor activity, and data breaches for IT security professionals.
Sygnia says the actor pivoted from vCenter into ESXi on stolen vpxuser credentials, left backdoors that survive reboots, and terminated vmsyslogd so the hosts stopped writing an audit trail while containment ran.
Reality
The path Mindguard reported works against Kiro 0.7.45 on Windows and Amazon closed it in 0.8.140, but no CVE was assigned and workspace trust made no difference, so the installed version string is the only check you have.
Reality
The Hacker News argues frontier models turn vulnerabilities into exploits at machine speed. Its remedy reorders the backlog; it does not add remediation capacity, and the text counts neither.
Reality
SOCRadar says two previously unreported RATs pull their next-stage commands out of FTP greetings. It is a first in the wild, and noisier than the web dead drops it replaces.
Reality
Reco says one Contabo-hosted server has been pulling records from misconfigured Salesforce and ServiceNow guest portals for over a year. The indicator is a static IP and a default Go user agent.
Reality
A Hacker News explainer makes the structural case: plaintext configs, unrotated tokens, broad scopes and prompt injection put agent plumbing outside secrets management.
Reality