Hermes AI Agent in YOLO Mode Automates Attack on Thai Ministry of Finance
An AI agent named Hermes in YOLO mode automated a cyberattack on the Thai Ministry of Finance, using custom tools and exposing internal vulnerabilities.
CyberWorldOps
Latest news
More news
Page 83 / 84 · 758 articles
Hotel Trap: Wi‑Fi Gateway Attacks to Steal Microsoft 365 Accounts
Discover how cybercriminals compromise hotel Wi-Fi gateways via DNS hijacking to steal Microsoft 365 credentials and bypass MFA using OAuth tokens.
BlueNoroff Orchestrates Attacks via Fake Video Conferences: AI Deepfakes and Wallet Theft in the Crosshairs
BlueNoroff uses fake video conferences, AI deepfakes, and ClickFix malware to steal cryptocurrency wallets via compromised Telegram accounts.
The OTP Deception on Snapchat: Anatomy of an Attack That Compromised Over 750 Accounts
Learn how a massive Snapchat phishing attack compromised 750+ accounts by bypassing OTP 2FA via vishing, and discover how to protect your account from hackers.
"The Com": Dismantled – The Nihilist Network Targeting Minors and Businesses
Europol dismantled "The Com", a nihilist network targeting minors with CSAM and businesses with ransomware in a major transnational EU operation.
Chick-fil-A One: New Credential Stuffing Attack Exposes 13,322 Loyalty Accounts
A recent credential stuffing attack on the Chick-fil-A One app exposed 13,322 loyalty accounts. Discover how it happened and the company's response.
Two Critical Vulnerabilities in Bing: Command Execution as SYSTEM and Root via Malicious SVGs
On July 23, 2026, researchers from XBOW publicly disclosed technical details of two critical vulnerabilities affecting Microsoft Bing, identified as
AgentForger: When a Phishing Link Is Enough to Create a Persistent AI Insider
A CSRF flaw in ChatGPT Workspace, AgentForger, allowed a phishing link to create a persistent AI insider, risking data theft and remote command execution.
Certighost: The Attack That Steals Domain Controller Identity via AD CS
Certighost exploits CVE-2026-54121 in AD CS, letting low-privileged users steal DC certificates and compromise Active Directory forests via DCSync.