NetmanageIT CTO Corner

Technical illustration of a Windows malware implant using multiple AI model connections to automate credential theft, persistence, and webhook exfiltration

Ai Threat Intel Analysis

CLOSEDQUORUM and the Rise of Autonomous AI Malware

Cisco Talos analyzes CLOSEDQUORUM, a Windows implant that delegates tactical decisions to multiple commercial LLMs instead of a conventional C2 server.

Chinese hackers exploit multiple technologies to steal govt data

Chinese hackers exploit multiple technologies to steal govt data

BleepingComputer

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

BleepingComputer

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

New ClosedQuorum Windows malware uses AI for attack decisions

New ClosedQuorum Windows malware uses AI for attack decisions

BleepingComputer

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Reducing shadow IT visibility gaps with Wazuh

Reducing shadow IT visibility gaps with Wazuh

BleepingComputer

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Check Point warns of Management Server zero-day exploited in attacks

Check Point warns of Management Server zero-day exploited in attacks

BleepingComputer

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

BleepingComputer

Webinar tomorrow: Inside real-world Google Workspace breaches

Webinar tomorrow: Inside real-world Google Workspace breaches

BleepingComputer

D-Link warns of max severity zero-day bug in DIR-822A routers

D-Link warns of max severity zero-day bug in DIR-822A routers

BleepingComputer

AI Agents Are Rewriting the Rules of Lateral Movement

AI Agents Are Rewriting the Rules of Lateral Movement

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

DORA Year Two: Can Your SOC Actually See the Attack?

DORA Year Two: Can Your SOC Actually See the Attack?

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

New Windows Defender zero-day blocks Microsoft antivirus updates

New Windows Defender zero-day blocks Microsoft antivirus updates

BleepingComputer

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

CISA orders feds to patch Zyxel flaw exploited for data theft

CISA orders feds to patch Zyxel flaw exploited for data theft

BleepingComputer

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor