Google Threat Intelligence Group says a zero-day exploit against an unnamed open-source web administration tool was likely created with AI to bypass two-factor authentication, and the attack was stopped before mass exploitation. The report also links AI use to other threat activity involving APT27, APT45, UNC2814, UNC5673, UNC6201, CANFAIL, LONGSTREAM, Overload, and PromptSpy. #APT27 #APT45 #UNC2814 #UNC5673 #UNC6201 #CANFAIL #LONGSTREAM #Overload #PromptSpy

North Korean hackers expand from espionage to ransomware attacks, targeting critical infrastructure and infiltrating US companies with stolen identiti

Google reported that state-backed hackers from North Korea and China are increasingly using AI to identify cybersecurity vulnerabilities and develop zero-day exploits. The report highlighted sophisticated AI-driven hacking attempts linked to North Korean group APT45, raising global cybersecurity concerns Seoul: State-sponsored hackers from North Korea and China have demonstrated “significant interest” in leveraging artificial intelligence (AI) to detect previously unknown cybersecurity vulnerabilities, Alphabet’s Google said in a report on Tuesday. “We noted a particular interest from several clusters of threat activity associated with the People’s Republic of China (PRC) and the Democratic People’s Republic of Korea (DPRK),” Google’s threat intelligence group said in the report, referring to North Korea by its official name, the DPRK. They have already shown sophisticated approaches to leveraging AI for vulnerability research, the report said, noting a recent attempt from North Korea’s hacking group APT45, reports Yonhap news agency. The North Korean hackers leveraged AI to send thousands of repetitive prompts that recursively analyse different cybersecurity blind spots for possible exploitation, the report elaborated. The report also noted that it used AI to detect hackers from a criminal group using a “zero-day exploit,” which they planned to use in a “mass exploitation,” and blocked it...

2026年5月15日 OpenAIがサプライチェーン攻撃を受け一部データ窃取を確認。 人気オープンソースライブラリ「TanStack」を標的としたサプライチェーン攻撃により、OpenAIの従業員2名のデバイスが侵害された。攻撃者は6分間で84本の悪意あるバージョンを公開し、認証情報の窃取と自己増殖を行うマルウェアを埋め込んだ。研究者が20分以内に検知。 OpenAIは調査の結果、ユーザーデータ...

Famous Chollima (47% of state-backed tech attacks), Kimsuky (HelloDoor malware with AI assistance), and APT45 (recursive prompting): three parallel tracks detailed in the report.

La société américaine de cybersécurité Mandiant a rendu un rapport sur le groupe de hackers APT45, qui mène une série de campagnes...-Cybersécurité

Die Gruppe APT45 alias Andariel hat Luftfahrt, Rüstungsindustrie sowie den Gesundheits- und Energiesektor ins Visier genommen. Erste Anklagen wurden erhoben.

The newly designated APT45 pursues military intelligence but has been expanding its targets, Mandiant says.

WormGPT’s emergence in June 2023 marked a turning point as AI-powered hacking tools rapidly spread across paid SaaS, open-source releases, and locally run models, lowering the barrier to cybercrime and enabling new forms of attack automation. The article also shows AI moving beyond support roles into orchestration, credential theft, and self-modifying...

Google says it has identified the first zero-day exploit it believes was developed with artificial intelligence, including a Python script used to bypass two-factor authentication on an open source web-based system administration tool. The report also highlights AI-driven vulnerability research and exploit development by Chinese and North Korean threat actors, including...

North Korean hackers have been actively targeting critical infrastructure and military operations located in the USA. The hacker group Andariel, also known as APT45 and Onyx Sleet, has been trying to steal nuclear and military secrets from some of the…

The FBI and Google-owned Mandiant have recently revealed a sophisticated North Korean hacking group known as APT45. This group, previously dubbed Andariel, has been conducting cyber espionage campaigns globally since at least 2009.

The newly designated APT45 pursues military intelligence but has been expanding its targets, Mandiant says.

North Korean hacker group Stonefly (aka APT45) continues to target US companies "involved in businesses with no obvious intelligence value."

La société américaine de cybersécurité Mandiant a rendu un rapport sur le groupe de hackers APT45, qui mène une série de campagnes...-Cybersécurité

La société américaine de cybersécurité Mandiant a rendu un rapport sur le groupe de hackers APT45, qui mène une série de campagnes...-Cybersécurité

La société américaine de cybersécurité Mandiant a rendu un rapport sur le groupe de hackers APT45, qui mène une série de campagnes...-Cybersécurité

The U.S. Department of the Treasury sanctioned cyber actor Song Kum Hyok for his association with North Korea's hacking group Andariel and for facilitating IT worker schemes that generated revenue for...