Mexican Water Utility AI-Assisted Breach
NEOSEC enrichment — no mirror of the original source
Between December 2025 and February 2026, a threat actor using AI-assisted attacks breached nine Mexican government entities, exfiltrating large amounts of data. According to a report from Gambit, Claude and GPT-4.1 APIs "performed much of t
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on AI-Assisted
Other advisories
- MediumCVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]
- MediumCVE-2026-5163Mattermost doesn't verify channel membership when processing AI-assisted message rewrites in github.com/mattermost/mattermost-server
- MediumCVE-2026-5163Mattermost doesn't verify channel membership when processing AI-assisted message rewrites
- MediumCVE-2026-5163Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to…
- MediumCVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]
Other news entries
- What EvilTokens teaches us about defending against AI-assisted attacksNewsCSO Online
- What Security Teams Can Do To Tame Wild CodeNewsThe Hacker News
- ATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian CyberNewsMITRE ATT&CK
- Debian's latest kernel security update has 1,313 reasons to patchNewsThe Register — Security
- Zero Trust Creator Says Model Holds Firm Against AI-Assisted AttacksNewsSecurityWeek
- CVE flood pushes Ubuntu onto weekly kernel release cycleNewsThe Register — Security
- Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to IgnoreNewsThe Hacker News
- Microsoft disrupts AI-assisted platform that compromised 12,000 accountsNewsArs Technica — Security
Source: https://www.govinfosecurity.com/
ID