Official account of Predicta Lab. Leveraging intelligence since 2020. Contact us at [email protected] Our articles 馃憠 https://xitter.cf/t.co/qCs1kI49wT
Joined March 2020
- Tweets709
- Following292
- Followers9.1K
- Likes634
A ransomware crew ran its intrusions through commercial AI models and left the chat logs on an open server. 8,257 messages later, we can read exactly how a machine breaks into a company. 猬囷笍
AI has industrialized the execution of intrusions, not the entry point. The way in is still unpatched edge devices and recycled passwords. The basics now buy you time against attackers moving at machine speed.
Where do you draw the line between an AI-assisted pentest and what this crew did?
Follow @PredictaLabOff for more cyber and OSINT news.
Moderna lost about 24 billion dollars in market value in a day. Not after a hack: after its own trial results appeared online two days before the embargo lifted. 猬囷笍
The takeaway: embargoed science is market-moving information with none of the protections of insider data. It flows through conference platforms, journals and partner portals, and every stop is a potential leak point.
Who in your threat model handles data that can move a stock by 20 percent: the lab, the journal, the conference, or the PR agency?
Follow @PredictaLabOff for more cyber and OSINT news.
The uncomfortable timeline: an external audit flagged one of the bugs in 2024. The volunteer security team, bound by consensus and afraid of breaking the ecosystem, stalled for two years. AI code reviews in August forced it to the top of the pile.
AI is now finding bugs in the web's foundations faster than coordinated disclosure can handle. 758,000 internet-facing PHP hosts run versions that will never get this patch. The long tail starts now.
What broke first here: the code, the volunteer governance, or the embargo?
Follow @PredictaLabOff for more cyber and OSINT news.
The NSA's advice to every org running PHP this week: install the emergency update now, or take your systems offline until you can. Four governments chose offline. 猬囷笍
France pulled tax, weather and prefecture portals. The Netherlands took down DigiD and Overheid.nl. Denmark and Finland followed. Not breaches: precautions, while emergency patches rolled out.