News
CrowdStrike attributes an espionage campaign using AI agents to VAPOR PANDA.
More than 200 organizations in at least 14 countries were targeted; nine experienced post-compromise activity.
ARTEX coordinated agents with DeepSeek as the main model; human operators directed their work.
An unsigned SAML assertion and an XML external entity flaw were used to obtain cloud credentials.
Oktsec recommends verifying the rejection of unsigned SAML assertions and the absence of a session after rejection.