AI Bait Campaigns Target Builders, Credential Stuffing Goes Industrial, and Fresh Red/Blue Tool Drops

News

Threat Actors Weaponize AI Tool Hype to Deliver NoodloRAT Infostealer

Attackers are cloning popular AI productivity tools and bundling them with NoodloRAT malware. If your team is downloading random AI utilities without vetting, this is exactly how you get owned.

CISA Updates KEV Catalog with New Actively Exploited Vulnerabilities

CISA added fresh entries to its Known Exploited Vulnerabilities catalog. If your patching pipeline doesn't auto-prioritize KEV entries, you're manually tracking what should be automated.

Analysis

Credential Stuffing Campaigns Surge Across Major Platforms

Automated credential stuffing is hitting at industrial scale, fueled by massive combo lists from prior breaches. If you're not enforcing MFA and rate limiting auth endpoints, you're leaving the front door open.

Tools

PACU v1.4.0 Ships with New AWS Exploitation Modules

Rhino Security's flagship AWS offensive tool gets a meaningful update with new modules for privilege escalation and persistence. Essential for anyone running cloud pentests or testing their own attack surface.

CISA's Malcolm Network Analysis Suite Gets a Major Release

Malcolm is CISA's open-source network traffic analysis stack, and this release brings performance improvements and new detection capabilities. Free, production-grade NDR that doesn't require a vendor contract.

Fresh Nuclei Templates Drop for Vulnerability Scanning

New templates covering recently disclosed CVEs and misconfigurations. If you're running nuclei in CI/CD or for continuous attack surface monitoring, update your templates now.