Threat Intelligence Center

Security researchers discovered a malicious model on Hugging Face masquerading as an official OpenAI release, accumulating 244,000 downloads before detection. The attack leveraged a Rust-based infostealer deployed through loader.py and start.bat execution chains, targeting developers and organizations in AI development and enterprise environments.

Hyunwoo Kim and researchers at Theori have disclosed Dirty Frag, a critical local privilege escalation vulnerability affecting Linux systems across all distributions. This vulnerability joins a lineage of kernel-level LPE flaws including CVE-2016-5195 and CVE-2022-0847.

Security researchers have identified PCPJack, a successor malware to the TeamPCP threat, actively stealing cloud secrets and credentials from organizations across financial services, software development, email platforms, and cryptocurrency operations.

Security researchers have identified a large-scale malware campaign distributing fake call history applications through the Google Play Store that compromised over 7.3 million users. The campaign, attributed to GoldFactory, leverages multiple malware variants including Gigabud RAT, MMRat, and Taotie to exfiltrate financial data and payment credentials from infected devices.

A comprehensive analysis of 25 million security alerts across professional service firms reveals a critical detection gap: organizations miss approximately one significant threat per week. The research identifies persistent blind spots in identifying Cobalt Strike, Meterpreter, Mimikatz, and StrelaStealer activity—tools favored by both criminal and nation-state threat actors.

Recent penetration testing campaigns have uncovered a critical gap in enterprise security strategies. AI systems are exhibiting security flaws that exceed the severity and exploitability of traditional software vulnerabilities. These findings challenge conventional risk assessment frameworks and demand immediate attention from security teams and business leaders responsible for AI deployments.