An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

The hackers have spent years quietly extracting configuration data from poorly configured routers across critical infrastructure.

© Getty Images/iStockphoto/marchmeena29

Who Is Affected and Next Steps The Russian Federal Security Service (FSB)-affiliated cyber outfit Center 16 is actively scanning the internet for vulnerable and poorly configured networking devices, particularly routers...

The post CISA Warns Russian FSB Hackers Are Targeting Critical Infrastructure Routers appeared first on Cyber Defense Magazine.

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.