HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL ...
Infosecurity Magazine

Open Directory Exposes Three Evilginx Phishing Operators

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...
SecurityWeek

Agentic AI Used to Conduct Ransomware Attack via Langflow

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.
The Hacker News

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
Techzine Europe

AI agent carries out ransomware attack independently

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...
techtimes

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...
Dark Reading

JadePuffer: The First Complete LLM-Driven Ransomware Attack

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...
CSO Online

This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...