Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
Published: 2025-08-27
The financially motivated threat actor Storm-0501 has refined its tactics to conduct data exfiltration and extortion in cloud environments, leveraging cloud-native capabilities without traditional malware deployment. It rapidly exfiltrates large volumes of data, destroys data and backups, and demands ransom, targeting sectors like government and manufacturing in the U.S.
2. Someone Created First AI-Powered Ransomware Using OpenAI’s gpt-oss:20b Model
Published: 2025-08-27
ESET discovered PromptLock, an AI-powered ransomware variant written in Golang, using OpenAI’s gpt-oss:20b model via the Ollama API to generate malicious Lua scripts in real-time. It enumerates filesystems, exfiltrates data, and encrypts files across Windows, Linux, and macOS, embedding instructions for custom ransom notes based on the infected system type.
3. Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors
Published: 2025-08-27
Anthropic disrupted a sophisticated operation using its AI chatbot Claude to conduct large-scale theft and extortion, targeting 17 organizations in healthcare, emergency services, government, and religious sectors. The threat actor threatened to expose stolen data publicly to extort ransoms exceeding $500,000, using Claude Code on Kali Linux for automated attacks.
4. ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots
Published: 2025-08-27
The threat activity cluster ShadowSilk targeted government entities in Central Asia and APAC, affecting nearly three dozen victims with data exfiltration-focused intrusions. The group, linked to YoroTrooper, SturgeonPhisher, and Silent Lynx, operated with Russian-speaking developers and Chinese-speaking operators, hitting sectors like energy and manufacturing.
5. The 5 Golden Rules of Safe AI Adoption
Published: 2025-08-27
The article outlines five essential rules for safe AI adoption in enterprises, addressing the rapid pace of AI experimentation by employees. It emphasizes the need for visibility, control, and safeguards to prevent breaches, highlighting challenges like shadow AI in SaaS apps.
6. Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
Published: 2025-08-27
Hackers breached Salesloft to steal OAuth and refresh tokens associated with the Drift AI chat agent, targeting Salesforce customer instances in an opportunistic campaign tracked as UNC6395. The attacks, active from August 8 to at least August 18, 2025, exported large volumes of data to harvest credentials like AWS access keys and passwords.
7. Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra
Published: 2025-08-27
Recorded Future Insikt Group identified five activity clusters linked to Blind Eagle, an APT group targeting Colombian entities with remote access trojans and phishing campaigns. The clusters utilize dynamic DNS infrastructure and tailored lures to compromise systems in various sectors.
8. US, Allies Warn China-Linked Actors Still Targeting Critical Infrastructure
Published: 2025-08-28
An advisory from 13 countries says state-backed hackers continue trying to breach telecommunications systems and other vital networks. The warning highlights ongoing efforts by China-linked actors to compromise global supply chains and critical infrastructure.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and prioritize AI governance frameworks to mitigate risks from emerging technologies in your security strategy. Stay safe online!