The Hacker News

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

APT37 spreads RokRAT via Facebook and trojanized PDFelement accounts created Nov 10, 2025, enabling espionage and data theft.
Gadget Review on MSN

An AI just hacked a hardened operating system that was meant to be hacker‑proof

AI autonomously exploits FreeBSD kernel vulnerabilities in hours, compressing cybersecurity response times from weeks to ...

仅凭一份漏洞公告，Claude自主写出攻击代码，4小时攻破安全系统

在数字世界的底层架构中，存在着一些历经数十年打磨、被业界奉为安全标杆的操作系统“堡垒”。然而，这座堡垒已经能被一位看不见的“非人类黑客”在短短 4 小时内彻底攻破。

仅凭一份漏洞公告，Claude自主写出内核级攻击代码，4小时攻破全球最 ...

在数字世界的底层架构中，存在着一些历经数十年打磨、被业界奉为安全标杆的操作系统“堡垒”。然而，这座堡垒已经能被一位看不见的“非人类黑客”在短短 4 小时内彻底攻破。

刚刚，AI用4小时攻破“世界最安全开源系统”

智东西4月1日消息，据福布斯报道，发生在号称 “最安全开源系统” 的 FreeBSD的安全事件引发行业震动：研究人员 借助AI，仅投入4小时算力，就利用漏洞实现了对系统的成功攻破。

AI Just Hacked One Of The World's Most Secure Operating Systems

An AI agent just autonomously exploited a FreeBSD kernel vulnerability in four hours, signaling a fundamental shift in the ...

Hackers exploit TrueConf zero-day to push malicious software updates

Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day vulnerability, allowing them to execute ...
SecurityWeek

North Korean APT Targets Air-Gapped Systems in Recent Campaign

Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors. A North Korea-linked threat actor tracked as APT37 has been observed using five new ...
CSOonline

XWorm campaign shows a shift toward fileless malware and in-memory evasion tactics

In a newly disclosed multi-stage threat campaign, attackers were seen skipping disk and leaning on in-memory tricks to deliver the XWorm remote access trojan (RAT). According to Forcepoint Labs’ ...
IEEE

Shellcode detector for malicious document hunting

Abstract: Advanced Persistent Threat (APT) attacks became a major network threat in recent years. Among APT attack techniques, sending a phishing email with malicious documents attached is considered ...