NewsDark Reading
Chinese Hackers Impersonate US Officials for AI Cyber Espionage
Teaser from the source
An emerging threat group known as TA419 established seemingly legitimate professional relationships with AI policy experts working for US think tanks, universities, and legal organizations.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Impersonate
Other advisories
- HighCVE-2026-87817GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
- HighCVE-2026-87817GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- Not ratedosv:CVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- MediumCVE-2026-90955Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging.
- Not ratedosv:GHSA-2pxq-5vcg-rq29Duplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution
Other news entries
- Fake Claude, ChatGPT Attacks Surge, Putting Developers at RiskNewsDark Reading
- Fake Arch Linux packages push malware with root privilegesNewsBleepingComputer
- Docker Hub flaw let attackers impersonate users, tamper with imagesNewsBleepingComputer
- Two characters open up a world of typosquatting opportunities in Chromium browsersNewsThe Register — Security
- Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA CodesNewsThe Hacker News
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and TaiwanNewsThe Hacker News
- China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingNewsThe Hacker News
- Hackers Use ChatGPT Custom GPTs in ClickFix AttacksNewsSecurityWeek
ID