✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
ChocoPoC Malware: A New Threat Targeting Cybersecurity Researchers
In July 2026, cybersecurity researchers identified a campaign distributing a Python-based remote access trojan (RAT) named ChocoPoC through trojanized proof-of-concept (PoC) exploits on GitHub. Unlike previous incidents where malware was embedded directly in exploit files, this campaign introduced malicious Python packages into the PoC's dependency list. When victims cloned these repositories, a trojanized package named 'frint' was automatically installed, which subsequently fetched another malicious package, 'skytext.' This package contained a compiled Python extension that decrypted and executed additional code, ultimately downloading the ChocoPoC RAT from a Mapbox dataset. The RAT possessed capabilities such as executing arbitrary commands, uploading files, and collecting sensitive data, including browser credentials and network configurations. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/new-chocopoc-malware-targets-researchers-via-trojanized-poc-exploits/?utm_source=openai)) This incident underscores a growing trend where threat actors exploit trusted platforms like GitHub to distribute malware, targeting professionals who frequently utilize PoC exploits for research and testing. The sophisticated method of embedding malicious code within dependency packages highlights the need for heightened vigilance when sourcing code from public repositories. As attackers continue to refine their techniques, the cybersecurity community must adapt by implementing stricter code verification processes and promoting awareness about the risks associated with unverified code. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/new-chocopoc-malware-targets-researchers-via-trojanized-poc-exploits/?utm_source=openai))
3 weeks ago
Kill Chain
ScreenConnect Exploited in Global AsyncRAT Campaign - 2026
In early 2026, a sophisticated cyber campaign exploited legitimate remote access tools to deploy AsyncRAT malware. Attackers created fraudulent websites mimicking popular software like OBS Studio and DNS Jumper, leveraging search engine optimization to rank these sites highly. Unsuspecting users downloaded trojanized installers containing a legitimate Microsoft-signed binary and a malicious DLL, which installed ScreenConnect for remote access. This access was used to execute scripts that disabled security features and deployed AsyncRAT, enabling data theft and system control. The campaign's extensive infrastructure spanned over 90 domains in multiple languages, indicating a global reach. This incident underscores the evolving tactics of cybercriminals who exploit trusted tools and SEO techniques to infiltrate systems. Organizations must remain vigilant, ensuring software is downloaded from verified sources and implementing robust security measures to detect and prevent such sophisticated attacks.
3 weeks ago
Kill Chain
ClawHavoc: Unveiling the OpenClaw Supply Chain Attack
In early 2026, the OpenClaw AI assistant ecosystem faced a significant supply chain attack known as 'ClawHavoc.' Threat actors uploaded over 1,100 malicious 'skills' to ClawHub, OpenClaw's official marketplace, disguising them as legitimate productivity tools. These malicious skills, once installed, deployed various malware, including the Atomic macOS Stealer (AMOS), compromising user credentials, cryptocurrency wallets, and sensitive documents. The attack exploited the trust users placed in ClawHub's skill repository, leading to widespread data breaches and system compromises. This incident underscores the evolving threat landscape targeting AI agent ecosystems. The ease of creating and distributing malicious skills highlights the urgent need for robust security measures, including stringent code audits, supply chain verification practices, and user education on the risks associated with third-party extensions.
3 weeks ago
Kill Chain
Cybercriminals Exploit SEO and Legitimate Tools to Deploy AsyncRAT
In July 2026, cybersecurity researchers uncovered a large-scale campaign where threat actors utilized SEO poisoning to distribute malicious installer archives via spoofed websites. These installers, masquerading as popular software like OBS Studio and Bandicam, bundled a legitimate Microsoft install.exe binary with a rogue DLL, leading to the deployment of the ScreenConnect remote access tool. This tool facilitated the execution of AsyncRAT, enabling attackers to maintain control over compromised systems, steal sensitive data, and monitor user activity. The campaign spanned over 90 domain names across 10 languages, indicating a highly coordinated effort. ([thehackernews.com](https://thehackernews.com/2026/07/seo-poisoned-software-sites-abuse.html?utm_source=openai)) This incident underscores the evolving tactics of cybercriminals who exploit legitimate tools and SEO techniques to enhance the reach and effectiveness of their attacks. The use of trusted software as a delivery mechanism for malware highlights the need for heightened vigilance and robust security measures to detect and prevent such sophisticated threats.
3 weeks ago
Kill Chain
Critical Unpatched Vulnerability in Argo CD Repo-Server Threatens Kubernetes Clusters
In July 2026, a critical vulnerability was disclosed in Argo CD's repo-server component, a widely used tool for deploying software to Kubernetes. The flaw allows unauthenticated attackers to execute arbitrary code by sending crafted requests to the repo-server's internal gRPC service, which lacks authentication. This vulnerability can lead to full cluster takeovers if the repo-server is accessible within the network. Despite being reported to Argo CD's maintainers in January 2025, the issue remains unpatched as of July 2026. This incident underscores the importance of securing internal services and implementing robust network policies. Organizations using Argo CD should immediately apply network isolation measures to prevent unauthorized access to the repo-server component and mitigate potential exploitation.
3 weeks ago
Kill Chain
19-Year-Old Scattered Spider Member Extradited to U.S. for Hacking Charges
On July 1, 2026, the U.S. Department of Justice announced the extradition of Peter Stokes, a 19-year-old dual U.S. and Estonian citizen, from Finland to the United States. Stokes, identified by the online handle "Bouquet," faces charges of conspiracy, computer intrusion, and fraud for his alleged involvement with the cybercriminal group Scattered Spider. This group has been linked to over 100 network intrusions, resulting in more than $100 million in ransom payments. Stokes appeared in a Chicago federal court on June 30, where he was ordered to remain in custody. The arrest underscores the persistent threat posed by Scattered Spider, known for targeting sectors such as casinos, retailers, and airlines through sophisticated social engineering tactics. Despite recent law enforcement actions, the group's methods continue to evolve, highlighting the need for organizations to bolster their cybersecurity defenses against such adaptive threats.
3 weeks ago
Kill Chain
Securing AI Endpoints: Lessons from Recent Exploits
Between March and May 2026, Zenity researchers identified three distinct campaigns where threat actors exploited exposed AI inference endpoints, such as those of Ollama and LiteLLM, to conduct offensive operations. These attacks did not require full system compromises; attackers merely needed knowledge of the exposed endpoints to leverage them for activities like autonomous penetration testing and web reverse-engineering. The incidents underscore the critical need for securing AI infrastructure against unauthorized access. This trend highlights a growing tactic among cyber adversaries: exploiting misconfigured or exposed AI endpoints to amplify their offensive capabilities. As organizations increasingly integrate AI into their operations, ensuring the security of these systems becomes paramount to prevent their misuse in cyberattacks.
3 weeks ago
Kill Chain
Agentjacking: The Emerging Threat to AI Coding Agents
In June 2026, Tenet Security unveiled a novel attack method termed 'agentjacking,' wherein attackers exploit AI coding agents by injecting malicious code through fabricated error reports in public bug tracking services. This technique enables unauthorized code execution on developers' machines, potentially leading to the theft of sensitive credentials and compromise of development environments. The attack leverages the AI agents' inability to distinguish between genuine content and embedded instructions, allowing adversaries to manipulate these agents into executing harmful commands. The significance of this discovery lies in the escalating integration of AI coding agents into software development workflows. As these agents become more prevalent, understanding and mitigating their vulnerabilities is crucial to prevent similar exploitation methods. Organizations must reassess their security protocols to address the unique risks posed by AI-driven development tools.
3 weeks ago
Kill Chain
Phantom Squatting: Unveiling the New AI-Driven Cyber Threat
In July 2026, cybersecurity researchers identified a new threat vector termed 'phantom squatting,' where attackers exploit AI-generated, non-existent domains associated with legitimate brands. By registering these hallucinated domains, cybercriminals can intercept traffic directed by AI systems, leading to phishing attacks and malware distribution. This method leverages the tendency of large language models (LLMs) to generate plausible yet fictitious web addresses, creating a novel supply chain vulnerability. The emergence of phantom squatting underscores the evolving landscape of AI-driven cyber threats. As organizations increasingly integrate AI assistants into their operations, the risk of such AI-induced vulnerabilities grows, necessitating proactive measures to monitor and secure potential phantom domains before they are weaponized by adversaries.
3 weeks ago
Kill Chain
Phantom Squatting: Exploiting AI-Generated Domains for Cyber Attacks
In July 2026, Palo Alto Networks' Unit 42 identified a new cyberattack technique termed 'phantom squatting,' where attackers exploit AI-generated, non-existent domains to conduct phishing and malware distribution. By prompting large language models (LLMs) with queries about official websites, attackers collect these hallucinated domains, register them, and create malicious sites that appear legitimate to users and AI tools alike. This method leverages the trust users place in AI-generated content, leading to increased risks of credential theft and malware infections. The emergence of phantom squatting underscores the evolving landscape of cyber threats, particularly as AI tools become more integrated into daily operations. Organizations must recognize the potential for AI-generated misinformation to be weaponized and implement proactive measures to monitor and secure domains that could be exploited through such techniques.
3 weeks ago
Kill Chain
Protecting AI Agents from MCP Tool Poisoning Attacks
In June 2026, Microsoft Incident Response detailed a sophisticated attack pattern targeting enterprise AI agents utilizing the Model Context Protocol (MCP). The attack involved malicious modifications to MCP tool descriptions, leading AI agents to execute unauthorized actions, such as exfiltrating sensitive financial data. This exploitation underscores the vulnerabilities inherent in AI agents that transition from passive content reading to active task execution. The incident highlights the critical need for robust security measures as AI agents become more autonomous and integrated into enterprise workflows. With the projected growth of AI agents in enterprises, securing these systems against such sophisticated attacks is paramount to prevent potential data breaches and operational disruptions.
3 weeks ago
Kill Chain
Critical Vulnerabilities in Cursor AI Code Editor Expose Developers to Remote Code Execution
In June 2026, two critical vulnerabilities, CVE-2026-50548 and CVE-2026-50549, were discovered in Cursor, an AI-powered code editor. These flaws allowed malicious agents to bypass the application's sandbox protections, enabling unauthorized execution of commands on a developer's machine without user interaction. The vulnerabilities stemmed from improper handling of the working directory and symlink resolution, permitting attackers to write arbitrary files outside the intended workspace, leading to potential remote code execution. ([nvd.nist.gov](https://nvd.nist.gov/vuln/detail/CVE-2026-50549?utm_source=openai)) The discovery of these vulnerabilities underscores the growing risks associated with AI-integrated development tools. As AI becomes more embedded in software development, ensuring the security of such tools is paramount to prevent exploitation by threat actors.
3 weeks ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports