⌁AI·CYBER·BRIEF▌

#edge devices

AI Threats6 min read

Ransomware affiliates ran intrusions through an AI coding agent, exposed server shows

SOCRadar found an open server showing INC and The Gentlemen affiliates using an AI agent to target 62 organisations through old, unpatched edge devices.

RansomwareINC RansomwareThe Gentlemen
AI Threats7 min read

TrendAI: 44 AI agents automated attacks on Japanese firms — through old, unlocked doors

Trend Micro researchers detail three AI-assisted attack setups targeting mostly Japanese organizations. Entry came via exposed admin pages and default passwords, not new flaws.

TrendAICyberStrikeAIJapan
AI Threats12 min read

A custom PHP2Shell exploit rooted 25 Palo Alto firewalls — on branches that had no hotfix yet

Dream and Unit 42: attackers chained PHP2Shell with the Fragnesia kernel bug to root PAN-OS firewalls and tunnel into a US government-affiliated network. AI tools were present, not proven.

AnalysisPHP2ShellPAN-OS