NewsPalo Alto Networks Unit 42
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Teaser from the source
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign Targets Government Linux Infrastructure appeared first on Unit 42 .
This is the RSS-feed teaser. Read the full article at the original source.
Read at Palo Alto Networks Unit 42More on Infrastructure
Other advisories
- Not ratedosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2026-EV96739Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure
- Not ratedosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2026-WG10458Security fix for GHSA-hrxh-6v49-42gf applied in: rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.4-r2, newrelic-infrastructure-agent 1.78.1-r2, lvm-driver 1.10.0-r1, lvm-driver 1.10.0-r2, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r0, fulcio-fips 1.5.1-r1, fluent-operator-fips 3.10.0-r2, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.14.8-r2, temporal-server 1.28.4-r1, temporal-server 1.29.7-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, tempo-fips 3.0.2-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-csi-external-resizer-fips 2.2.1-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, multus-cni-fips 4.3.0-r1
- Not ratedosv:CLEANSTART-2026-LX06010Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack
- MediumCVE-2026-70380A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacke…
- HighCVE-2026-19953Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
- HighCVE-2026-113345Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: fehlerhafte Standardberechtigungen
Other news entries
- Google, Partners Disrupt 1.3 Million-Device-Strong XCPE BotnetNewsDark Reading
- CISA flags WordPress RCE flaw as actively exploited in attacksNewsBleepingComputer
- Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal InfrastructureNewsThe Hacker News
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Hackers hijack cPGuard autoupdate to deploy backdoor, steal dataNewsBleepingComputer
- Fresh European Fridge Attacks Put Cold-Chain Security in FocusNewsDark Reading
- Binance says fake job interview led to $6.3 billion crypto heistNewsBleepingComputer
- UK organisations warned to brace for AI-powered ransomware attacksNewsCSO Online
Source: https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure/
ID