Two CVSS 9.2 PHP RCEs (CVE-2026-109618/-109619) actively exploited against exposed PAN-OS management interfaces; 22.6M+ exposed instances per Xpanse. Credit to Unit 42 for retracting an earlier unconfirmed link.
unit42.paloaltonetworks.com/…
#CTI #AttackSurface
More than 200 organizations in at least 14 countries, in 11 days, from one controller.
That is the scale CrowdStrike reports for VAPOR PANDA's first observed use of AI-driven intrusion tooling. The China-nexus adversary ran ARTEX, an agentic framework in which a main agent coordinates planner and worker agents from initial access through lateral movement. A human operator stayed in the loop, issuing instructions in Chinese and stepping in mainly at decision points.
Three things stand out to me.
The attribution is infrastructure-based: the ARTEX controller is one CrowdStrike Intelligence has linked to VAPOR PANDA infrastructure, and the campaign is explicitly separated from the ARTEX activity reported under the Storm-0940 designation. Same tooling, different hands. Shared frameworks will make actor-level attribution harder, not easier.
The tradecraft is old. Unsigned SAML assertions, stolen VPN configurations, LAPS passwords, a mail admin token forged from 2022 directory keys that were likely never rotated. The AI did not invent new attacks. It ran known ones in parallel.
The operator told the agents to find Windows hosts "without Falcon" and work there. Coverage gaps are now being enumerated by machines.
CrowdStrike assesses that China-nexus adversaries will highly likely keep adopting frameworks like this over the next 12 months. I wrote about exactly this shift, from AI as an assistant to AI as the operator's workforce, in The Algorithmic Battlefield. It is arriving faster than I expected.
#ThreatIntelligence #CyberAttribution #AgenticAI #APT #CyberEspionage
The next battlefield could be the hospital you depend on, the bank holding your savings, or the news you believe.
What happens when artificial intelligence becomes a weapon of war?
A convincing deepfake can impersonate someone you trust. A cyberattack can disrupt essential services. A disinformation campaign can turn uncertainty into division.
You don’t need to work in cybersecurity to feel the consequences.
That’s the world I explore in my book:
📖 The Algorithmic Battlefield: Surviving the Era of AI-Driven Cyberwarfare
Written for a general audience, it connects AI, cyberattacks, espionage, and geopolitical conflict to the things we depend on every day.
Through clear explanations and practical examples, I examine how these threats work, what’s at stake, and how governments, businesses, and citizens can prepare.
One question I’d like to hear your thoughts on:
What worries you more: an attack that shuts down a critical service, or one that changes what millions of people believe?
Explore my book at Amazon: amazon.com/dp/B0HDDC2LLY
#CyberSecurity #ArtificialIntelligence #CyberWarfare #AICyberSecurity #InformationWarfare #Deepfakes #Disinformation #NationalSecurity #CriticalInfrastructure #CyberThreats #DigitalEspionage #Geopolitics #CyberResilience #FutureOfWarfare #TheAlgorithmicBattlefield
World War III may not start with an explosion.
It could start with:
a server.
an algorithm.
a compromised network.
a decision made in milliseconds.
By the time humans understand what happened, the algorithm may already have moved on.
📘 THE ALGORITHMIC BATTLEFIELD
Watch this. 👇
amazon.com/dp/B0HDDC2LLY
#AI #CyberSecurity #CyberWarfare
🤖 Made with AI
⚠️ The next battlefield may not have a front line.
It may begin with an algorithm.
AI. Cyber warfare. Automation. Digital power.
📖 THE ALGORITHMIC BATTLEFIELD
Are we controlling the algorithms—or are they controlling the battlefield?
👉 amazon.com/dp/B0HDDC2LLY
#AI #CyberSecurity #CyberWarfare
🤖 Made with AI
The next war may not begin with a missile.
It may begin with an algorithm.
🤖 Autonomous cyber agents
⚡ Critical infrastructure attacks
🎭 Deepfakes
🧠 Information warfare
🌍 Nation-state cyber operations
I explore this new battlefield in my book:
📘 The Algorithmic Battlefield
amazon.com/dp/B0HDDC2LLY
What worries you most: AI attacks or AI disinformation?
#Cybersecurity #AI #CyberWarfare
📘 My new book, The Algorithmic Battlefield, is now available on Amazon.
AI-driven cyberattacks, autonomous agents, deepfakes, critical infrastructure and nation-state cyberwarfare — and where digital conflict is heading next.
amazon.com/dp/B0HDDC2LLY
#Cybersecurity #CyberWarfare #AI
July Cyber Digest is out:
OpenAI's models escaped their sandbox and hacked Hugging Face
30+ Minnesota water utilities hit in coordinated OT attack
Biggest Patch Tuesday ever: 570+ flaws
Cl0p's new MOVEit-style mass campaign
Full breakdown: medium.com/@dip.rhythms7i/cy…
🚀 After 5 years of development, I’m releasing my platform to the public!
Built with passion, patience, and code.
🔗 github.com/kick707/uti
#opensource #cybersecurity #infosec #python #developer #tech
צה"ל על סרטון חיזבאללה שתיעד בסיס של חיל האוויר: הכטב"ם נועד לצילום בלבד, פעילות הבסיס לא נפגעה. @IDF זה מה שיש לנו להגיב ⁉️ באמת 😦… עד מתי ⁉️ haaretz.co.il/news/politics/…
🚀 Discover amazing deals and top-quality merchandise at Shah.Kar! From fashion to electronics, we've got it all. Shop now and experience excellence! 🌟🛍️ #eBay #ShopSmart #ShahKarStore #OnlineShopping #Deals
ebay.com/usr/shah.kar
Karen Shahbazian retweeted
Who are these people working for? nitter.cf/inanearts/status/17521…
Cybersecurity jobs available right now: April 17, 2024 ift.tt/D4ys7KF Help Net Security ift.tt/Q1KERob
Damn Vulnerable RESTaurant: Open-source API service designed for learning ift.tt/DQ3A5gZ Help Net Security ift.tt/Q1KERob
Understanding next-level cyber threats ift.tt/OUcYDmv Help Net Security ift.tt/Q1KERob
IT and security professionals demand more workplace flexibility ift.tt/xJXt0YV Help Net Security ift.tt/Q1KERob
Backdoor.Win32.Dumador.c MVID-2024-0679 Buffer Overflow ift.tt/E2FUMsc The Cyber Post ift.tt/L0ewQbI
Centreon 23.10-1.el8 SQL Injection ift.tt/DFem3Gh The Cyber Post ift.tt/L0ewQbI
New Tool Aims to Simplify and Streamline SBOM Adoption ift.tt/BAKd4R3 BankInfoSecurity.com RSS Syndication ift.tt/X0lIJ68
