AI Platform Cairn Abused to Hack Over 100 Organizations
Teaser from the source
At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused to Hack Over 100 Organizations appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Organizations
Other advisories
- Not ratedosv:CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
- Not ratedosv:CVE-2026-115933Forged signed tokens let any registered user take over other users and organizations
- Not ratedosv:CVE-2026-105213ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
- Not ratedosv:CVE-2026-104914MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
- Not ratedosv:CVE-2026-94455Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
- Not ratedosv:CLEANSTART-2026-FD75876Keycloak provides a way to manage identity providers and organizations through its administrative API
- MediumCVE-2026-18201Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations
- Not ratedosv:CVE-2026-75542OAuth token exchange grants repository scopes for organizations the principal cannot access
Other news entries
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Even after PHP2Shell, blast radius matters more than a CVSS scoreNewsBleepingComputer
- Wazuh and AI for Enhanced SOC WorkflowsNewsThe Hacker News
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedNewsThe Hacker News
- CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsNewsThe Hacker News
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
- AI-Generated Fake Login Pages Are Making Account Takeovers EasierNewsThe Hacker News
- Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionNewsThe Hacker News
Source: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/
ID