The RondoDox botnet began exploiting CVE-2025-62593 in Ray, a framework used by Amazon, Apple, and OpenAI to scale machine learning, on November 24, 2025, two days before the CVE was published, accord…
Security researchers at Bitsight uncovered a hidden ad-fraud operation, dubbed Fuyao Enterprise, in which cheap Android TV boxes, including some H96 models, secretly impersonate smartphones, visit AI-…
Bitsight disclosed the Fuyao ad-fraud operation on July 30, alleging that preinstalled apps on low-cost H96 Android TV boxes spoofed the devices as phones and generated fraudulent advertising traffic,…
Bitsight researchers uncovered Fuyao, a multimillion-dollar ad fraud operation that used preinstalled Android apps, device identity spoofing, AI-generated websites, and residential proxy services to g…
Varonis Threat Labs researchers created an OpenClaw autonomous email agent named "Pinchy" and ran four controlled phishing simulations that resulted in the exfiltration of AWS IAM keys, database crede…