This week's threat intelligence highlights a series of significant security incidents, including a $351.6 million cryptocurrency theft from Bitget and unauthorized activity on the FBI's recruitment portal. The landscape is also seeing a shift toward AI-driven threats, with autonomous agents being used to automate attacks on retailers and the discovery of CLOSEDQUORUM, a malware implant that uses multiple commercial AI models to automate post-compromise decision-making.
On the vulnerability front, critical patches have been released for Check Point Security Gateways, F5 BIG-IP, and WordPress to address active exploitation of remote code execution flaws. Intelligence reports further detail the sophisticated tradecraft of ransomware affiliates like Storm-2570 and the destructive cloud operations of Storm-3168, which targets Azure environments using compromised service principals.
Top comments (0)