A threat actor tracked by Huntress as UNC-PRNT used OpenAI Codex and DeepSeek models to build an AI-assisted offensive pipeline that compromised more than 440 PaperCut NG/MF instances across 395 organ…
Microsoft's Digital Crimes Unit announced on September 22 that it dismantled the core infrastructure of EvilTokens, a phishing-as-a-service platform tracked internally as Storm-2992, which had comprom…
A likely Russian-speaking threat actor used hundreds of AI agents powered by OpenAI's Codex orchestration harness and a DeepSeek model to compromise at least 440 PaperCut NG/MF instances across 395 or…
Security researchers at Huntress have documented three malware campaigns that abuse trusted AI sharing pages — Claude Artifacts/Share and shared ChatGPT and Grok conversations — to distribute the Sect…
Huntress CEO Kyle Hanslovan told Josh Lipton on Asking for a Trend that AI is lowering the barrier to entry for cybercriminals, contributing to a rise in cybersecurity attacks. Huntress, a cybersecuri…
Security researchers at Huntress have reverse-engineered a previously undocumented macOS malware family, dubbed MacSync, after tracing an intrusion back to a malicious advertisement masquerading as in…
A Bing malvertising campaign used a malicious public Claude Artifact hosted on Anthropic's legitimate claude.ai domain to distribute the SectopRAT remote-access trojan, compromising at least 29 organi…
Oracle released a record 1,449 security patches in its quarterly update, a number experts attribute to the company's increased use of AI for vulnerability detection. The patches span numerous products…
Attackers abused Anthropic's Claude Artifacts feature to host a fake download page on the genuine claude.ai domain, leading to malware infections. Huntress researchers disclosed that employees at at l…
Researchers at Huntress disclosed a malvertising campaign named FakeAgent that abused a public artifact on Anthropic's claude.ai domain to distribute the SectopRAT information-stealing Trojan, comprom…
Security experts urge enterprises to adopt risk-based, continuous vulnerability management and "just in time" patching as AI-powered tools accelerate vulnerability discovery and exploitation. Muhammad…
Huntress threat researchers discovered AI-generated, or 'vibe-coded', malware used in a live intrusion to map Active Directory environments, marking a shift in attacker tooling that requires new detec…
Huntress partnered with UK channel marketplace Giacom to give managed service providers on Giacom's Cloud Market platform direct access to Huntress's Agentic Security Platform and AI-centric SOC. The …
Huntress CEO Kyle Hanslovan stated that a threat hunter employed by the cybersecurity firm used 'poor judgment' when he alerted ransomware criminals about a law enforcement probe into their activities…
A breach at market intelligence firm Klue, caused by a compromised legacy credential in a Salesforce integration, exposed hundreds of companies' data, including security firms and password manager Las…
Cybersecurity firm Huntress reports a 1,380% surge in AI-powered device code phishing attacks targeting Microsoft 365 accounts, driven by a criminal phishing-as-a-service platform called EvilTokens th…