Information Security News

Information Security News Blog

SANDWORM_MODE worm attack diagram illustrating AI toolchain supply chain compromise 0

Malware

SANDWORM_MODE Worm Exploits AI Toolchains and Supply Chains

The Emergence of AI Infrastructure Worms Malicious packages have evolved to inconspicuously masquerade as routine operations executed by artificial intelligence assistants and automated build systems. The pervasive SANDWORM_MODE worm systematically exfiltrates cryptographic keys, infects...

Operation STANDOFF execution-level analysis diagram detailing multi-operator intrusion campaign infrastructure 0

Cybercriminals

Operation STANDOFF: Multi-Operator Intrusion Analysis

Unveiling Operation STANDOFF A singular malicious installer served as the entry point into a vast criminal ecosystem that concurrently compromised endpoints, exfiltrated sensitive data, hijacked victim bandwidth as proxy relays, and orchestrated vast networks...

AI sandbox escape vulnerabilities diagram showing execution paths in Cursor and Codex 0

Vulnerability

AI Sandbox Escape Vulnerabilities Threaten Coding Tools

The Illusion of Isolated Environments As artificial intelligence programming assistants gain unprecedented access to proprietary source code, credential keys, and live execution environments, formal sandbox boundaries no longer guarantee comprehensive endpoint protection. Security researchers...

JADEPUFFER AI ransomware infection path diagram, ENCFORGE malware targeting Langflow vulnerability 0

Malware

JADEPUFFER AI Ransomware Devastates Corporate Infrastructure

Targeting the Crown Jewels of the Digital Age Malicious extortionists increasingly target not merely conventional documents and databases, but rather the most invaluable digital assets within corporate infrastructures. The JADEPUFFER syndicate has engineered sophisticated...

AgentBaiting malware campaign diagram showing fake AI skills and MCP server repositories on GitHub 0

Malware

AgentBaiting Malware Campaign Targets AI MCP Servers

Emergence of AgentBaiting Threat Vector The surging popularity of artificial intelligence tools has transformed skill directories into lucrative initial access points. Attackers target Model Context Protocol (MCP) server repositories to distribute malicious loads. Notably,...

Malicious npm worm AI attack diagram showing software supply chain infiltration and credential theft. 0

Malware

Malicious npm Worm Targets AI Software Supply Chains

Stealthy Infiltration Tactics A sophisticated new malware conceals itself within standard software development processes. Furthermore, it perfectly mimics legitimate automation tools. Security systems frequently overlook this hidden threat entirely. Meanwhile, the malicious program actively...