#edge devices
Ransomware affiliates ran intrusions through an AI coding agent, exposed server shows
SOCRadar found an open server showing INC and The Gentlemen affiliates using an AI agent to target 62 organisations through old, unpatched edge devices.
TrendAI: 44 AI agents automated attacks on Japanese firms — through old, unlocked doors
Trend Micro researchers detail three AI-assisted attack setups targeting mostly Japanese organizations. Entry came via exposed admin pages and default passwords, not new flaws.
A custom PHP2Shell exploit rooted 25 Palo Alto firewalls — on branches that had no hotfix yet
Dream and Unit 42: attackers chained PHP2Shell with the Fragnesia kernel bug to root PAN-OS firewalls and tunnel into a US government-affiliated network. AI tools were present, not proven.