脆弱性

脆弱性

脆弱性

脆弱性

脆弱性

脆弱性

1. CISA: Windows BlueHammer flaw now exploited by ransomware gangs
2. Kali Linux 2026.2 released with 9 new tools, NetHunter updates
3. Microsoft adds smarter bot protection to Teams meetings
4. New BioShocking attack manipulates AI browser into data theft
5. Turning Indicators into Intelligence in OpenCTI with Criminal IP

脆弱性

1. Cybersecurity researchers have flagged a new browser-based ransomware malware called "InfernoGrabber" that runs on both Windows and Android devices, combining unrealistic concepts with real browser capabilities.
2. The malware artifact was generated using DeepSeek and was named "InfernoGrabber" v9.0 by the malware author. It operates as a malicious web server, stealing data like Discord tokens, credit card numbers, and cryptocurrency seed phrases. It can also perform web exploitation and ransomware actions.
3. The use of artificial intelligence models like DeepSeek is reshaping the cyber threat landscape, allowing threat actors to develop sophisticated malware and exploits. DeepSeek's ability to generate malicious applications with lower refusal rates may make it more appealing to bad actors.
4. The identified Python malware, categorized as In-Browser Ransomware, targets browsers that expose the File System Access API, such as Google Chrome and other Chromium-based browsers on Windows and Android. It executes attacks without the need for browser vulnerabilities or native payloads.
5. AI-assisted development is lowering the barrier for threat actors to create offensive code. Organizations are urged to strengthen their security measures, rethink permission-based trust, and consider every browser prompt as a potential security decision in light of new AI-generated cyber threats.

被害状況

攻撃者