Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

by admin | Jul 24, 2026 | Uncategorized

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand’s Ministry of Finance, which runs the country’s treasury and tax collection. The...

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

by admin | Jul 24, 2026 | Uncategorized

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. The...

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

by admin | Jul 24, 2026 | Uncategorized

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software’s source code. Every version...

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

by admin | Jul 24, 2026 | Uncategorized

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the...