Cybersecurity News
Filters
Filtered by category: The Hacker News, tag: cybersecurity × Clear
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Matched: Agentic
Microsoft linked Chinese state actor Storm-0940 to a supply chain attack on ConnectWise's Cloud Backup application. The group used ARTEX, a closed-source Go-based AI penetration testing framework, to accelerate scanning during the intrusion. ARTEX was made private after earlier abuse targeting South Korean financial institutions.
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Matched: health
A Belarus-aligned hacker group called Partisan Zmiy spent nearly two years inside a Russian healthcare organization's network, concealing a backdoor called Vasilek within VMware Tools. Documented by Russian cybersecurity firm Solar, the group has been active since at least 2020 and has a history of targeting industrial and government entities in Russia.
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
Matched: OpenAI
A legacy system at OpenCode was breached on October 16, potentially exposing API keys that users had stored in OpenCode Console — the company's optional hosted service that lets teams share access to OpenAI, Anthropic, and Google AI models. The company advised affected users to rotate their keys immediately.
AI Decision Models and Their Impact on AI SOC Platforms
Matched: OpenAI
AI decision models — a new category enabling fast, intuitive AI-driven choices — emerged rapidly, with TypeSafe AI's Jev launching September 15, OpenAI announcing a Decisions API at DevDay with a public beta October 6, and Cribl releasing an open-source local adapter. The category's quick rise is reshaping AI security operations center platforms by enabling faster, more autonomous threat response and decision-making workflows.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Matched: Agentic
A critical remote code execution flaw in Langflow (CVE-2026-105740, CVSS 9.9) is being actively exploited, with 1,423 attempts recorded across honeypots. The vulnerability affects the open-source AI workflow platform, now owned by IBM following its acquisition of parent company DataStax in February 2025. Security firm Previdian issued an alert urging users to patch immediately.
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Matched: cryptocurrency
Ahsay Backup has released new security patches for two AhsayCBS vulnerabilities, CVE-2026-105133 and CVE-2026-105134, after initial fixes proved incomplete. The flaws can be chained to bypass authentication and execute arbitrary commands, and have been actively exploited to deploy web shells and XMRig cryptocurrency miners on affected systems.