The Wave

1. 2d agoThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 5h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
3. 5h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
4. YesterdayLos Angeles TimesHow Iran used data from social media, fitness apps and satellites to target U.S. basesLos Angeles Times reports that Iran exploited commercial social media, fitness-app and satellite data to target U.S. bases in the Middle East, prompting the military to curb device tracking and rethink its regional footprint.

   2 articles

   1. YesterdayLos Angeles TimesEarliestHow Iran used data from social media, fitness apps and satellites to target U.S. bases
   2. 15h agoSouth China Morning PostPickupHow Iran used US troops’ digital footprints to hit Mideast bases for billions in damage

   CyberDefense5 linked
5. 3d agoThe Register · research by HuntressHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsHuntress reports an intruder abused a third-party RMM+ extension in cloud-hosted ScreenConnect partner panels to push attacker-controlled ScreenConnect clients to at least 288 computers across 48 organizations, prompting ConnectWise to disable five extensions.

   4 articles

   1. 3d agoSecurityWeekPickupHackers Deploy Malware in Fresh ScreenConnect Campaign
   2. 3d agoThe RegisterPickupHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
   3. 3d agoCybersecurity DivePickupConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
   4. 3d agoCyberScoopEarliestRogue remote-access campaign spread through ScreenConnect add-on, researchers say

   Cyber32 linked
6. 2d agoWIREDMicrosoft 365 Crawls Back to Life After a 24-Hour OutageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

   4 articles · 2 outlets

   1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
   2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
   3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
   4. 2d agoYahooPickupMicrosoft says services fully restored after day-long global outage

   Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
7. YesterdayAnthropic · research by IrregularInvestigating three incidents in our cybersecurity evaluationsAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

   2 articles

   1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
   2. YesterdayAnthropicEmotion concepts in a large language model

   CyberAI60 linked
8. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
9. 2d agoThe RecordDOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018The Justice Department detailed a Operation Endgame takedown that removed Gootloader from more than 100 servers and tied the malware to $28.8 million in U.S. ransomware losses since 2018.1 outletCyber15 linked
10. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
11. 3d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
12. 2d agoElasticWindows Endpoint Security Platform: Inside wesp.sysElastic's analysis of Microsoft's undocumented Windows Endpoint Security Platform finds that its kernel driver wesp.sys is a file system mini-filter that talks to user mode over a filter communication port, with no one-way reply path yet.1 outletCyber3 linked
13. 3d agoThe RecordConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsConnectWise is probing ScreenConnect breaches at nearly 50 organizations, tying the activity to the abuse of a third-party RMM+ extension and disabling it across roughly 400 customer environments.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers9 linked
14. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
15. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

    19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

    1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
    2. 3d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
    3. 3d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    4. 2d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
    6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
    7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
    8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
    11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
    12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
    13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
    14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
    15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
    16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
    17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
    18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
    19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

    Cyber448 linked
16. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
17. 6d agoYahooFrench officials blame Iran for refrigerator hacks, vow retaliationReuters reports French officials suspect Iran-backed hackers behind the October refrigerator hacks in France, one of the most disruptive cyberattacks of the ongoing US-Iran war.

    2 articles

    1. 6d agoYahooEarliestFrench officials blame Iran for refrigerator hacks, vow retaliation
    2. 6d agoSouth China Morning PostFrench officials suspect Iran is behind fridge cyberattacks, sources say

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks4 linked
18. 4d agoYahooU.S. Moves To Disrupt Iran’s MANPADS Procurement—History Shows It’ll Have Its Work Cut OutThe State Department sanctioned two individuals and one entity from Belarus, Nigeria and Russia over helping Iran procure MANPADS, days before CENTCOM launched Task Force Iron Gate to interdict sanctioned arms flows.1 outletDefense13 linked
19. 5d agoDark ReadingArtex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading reports that forks of the open-source Artex AI pen-testing framework, plus 45 similar tools, can still be used to run credential attacks and cloud breaches at machine speed.1 outletCyber9 linked
20. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
21. 5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
22. 6d agoTechCrunchAnthropic releases new Mythos and Fable models amid RSI concernsAnthropic launched Mythos 5.2 and Fable 5.2, cutting Fable's price and disclosing rising evaluation-awareness and covert-capability concerns alongside a METR report on recursive self-improvement.1 outletAI3 linked
23. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
24. 6d agoThe GuardianMore than 400,000 Russians killed fighting in Ukraine war, leaked data suggestsA leaked Rosstat dataset obtained by Cyber Partisans and Silent Crow suggests more than 400,000 Russian deaths in Ukraine since the 2022 invasion, as Abu Dhabi peace talks loom.1 outletWitkoff and Kushner meet Putin after Abu Dhabi Ukraine talks19 linked
25. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
26. 8d agoAtlantic CouncilPutin wants peace talks. He doesn’t want peace.Atlantic Council commentary argues Putin is using Abu Dhabi trilateral talks as a procedural gesture while offering no real concessions, and that Trump administration steps have eased pressure on Moscow.1 outletWitkoff and Kushner meet Putin after Abu Dhabi Ukraine talks35 linked
27. 9d agoArs Technica SpaceChainalysis says hackers stole credentials and tokens for all of its customersChainalysis disclosed that an AI agent-assisted intrusion in October 2026 exposed credentials, password hashes, and live tokens for all of its customers, including government agencies.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks1 linked
28. 9d agoDark ReadingUK Wades Into Tech Sovereignty Amid AI Policy ChangesUK government unveiled a roughly £600 million package to strengthen cyber defenses and AI security, with about £154 million for current cyber defenses and the rest for homegrown AI and cloud initiatives.1 outletCyberAI7 linked
29. 9d agoDefense OneThe war on Iran is stripping the western Pacific of US naval forcesDefense One reports that five of Yokosuka's ten destroyers and the carrier George Washington have been pulled to CENTCOM for the Iran war, drawing criticism that this strains Pacific deterrence and allied credibility.1 outlet6 linked
30. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
31. 10d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
32. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
33. 11d agoDark ReadingFresh European Fridge Attacks Put Cold-Chain Security in FocusEuropean authorities are probing a second wave of attacks that forced supermarket refrigerators into defrost mode at chains including ICA, Kesko, Ahold Delhaize and Colruyt, with exposed Danfoss and Copeland xweb controllers linked to the flaws.

    2 articles

    1. 12d agoCybersecurity DiveEarliestEuropean authorities probe ongoing attacks targeting grocery refrigerators
    2. 11d agoDark ReadingPickupFresh European Fridge Attacks Put Cold-Chain Security in Focus

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks6 linked
34. 11d agoCybersecurity DiveAttacker abuses Microsoft Entra ID to target downstream MSP clientsA lone hacker is abusing stolen Microsoft Entra ID application secrets to breach Microsoft 365 and Azure tenants at MSPs and their downstream clients, according to Todyl's report.1 outletCyber6 linked
35. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
36. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked
37. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.