North Korea-linked hacking group Kimsuky has built three local AI environments using Ollama, GPT4All, and Msty to automate cyberattacks on cryptocurrency and financial companies, according to a report…
Censys launched Censys IOC Investigator in open beta, an AI-powered threat investigation feature that automates pivoting, infrastructure mapping, and host profiling across its internet-wide intelligen…
Amazon Threat Intelligence has linked multiple compromises of popular NPM packages including axios, debug, chalk, and typo-crypto to a single DPRK-linked threat actor tracked as SAPPHIRE SLEET, STARDU…
A North Korean hacking subgroup, BlueNoroff, has compromised over 100 victims across 20 countries using fake Zoom and Microsoft Teams meetings to steal cryptocurrency wallet credentials, with full com…
Microsoft Threat Intelligence reported that North Korean state-sponsored actor Sapphire Sleet compromised over 140 packages in the @mastra npm scope, targeting developers building AI coding tools. The…
Microsoft's threat intelligence team attributed a supply chain attack targeting the Mastra AI ecosystem to North Korean state-sponsored hacking group Sapphire Sleet (BlueNoroff). The attackers comprom…
North Korean threat actor Sapphire Sleet compromised the Mastra AI open-source framework on June 17, 2026, by hijacking a maintainer's npm credentials and poisoning 141 packages within 88 minutes. The…