Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

AI Security & Threats

AI‑Powered OpenClaw Agents Auto‑Deploy Adaptive Reverse Shells, Bypassing Sandboxes

AI‑Powered OpenClaw Agents Auto‑Deploy Adaptive Reverse Shells, Bypassing Sandboxes

Researchers at VirusTotal demonstrated that the second phase of the OpenClaw project uses large‑language‑model‑driven agents to write, compile, and execute reverse‑shell payloads without human intervention. The AI analyzes the target’s network topology, selects the most reliable communication channel, and modifies the shell code on the

Threat Intelligence

Stealthy IP‑KVM Abuse Uncovered: New SANS Findings Show Hidden Network Infiltration

Stealthy IP‑KVM Abuse Uncovered: New SANS Findings Show Hidden Network Infiltration

A recent SANS diary entry documents a wave of campaigns in which threat actors compromise Internet‑connected KVM (Keyboard‑Video‑Mouse) switches and use them as footholds to reach internal systems. By exploiting default credentials, firmware vulnerabilities, or exposed management interfaces, the attackers obtain low‑level console access that bypasses

Threat Intelligence

Russian SIM‑swap Ops Hijack Signal and WhatsApp for Covert C2

Russian SIM‑swap Ops Hijack Signal and WhatsApp for Covert C2

U.S. intelligence agencies have flagged Russian‑linked threat groups that are compromising users of encrypted messengers such as Signal and WhatsApp. The actors combine SIM‑swap attacks with classic phishing to seize control of victims’ phone numbers, then use the trusted messaging apps as stealthy command‑and‑control channels

Security Culture & Human Factors

OWASP Retires Meetup, Consolidates to Secure Platform

The OWASP Foundation announced that its public Meetup site will be decommissioned, instructing members to move discussions, event sign‑ups, and community coordination to the official OWASP website and approved partner platforms. The change is intended to simplify event management, reduce fragmented communication channels, and apply consistent security controls across

Malware & Ransomware

CanisterWorm unleashes data‑wiping attack on Iranian ministries and energy sector

KrebsOnSecurity confirmed that the CanisterWorm wiper has been activated against multiple Iranian government ministries and state‑owned energy companies. The payload encrypts files, overwrites critical system data, and then deletes itself, rendering infected hosts inoperable. It incorporates sophisticated evasion techniques, including checks for sandbox or analysis environments and a delayed

Vulnerabilities & Exploits

Supply‑Chain Backdoor Inserted into LiteLLM via Compromised Trivy CI/CD

Supply‑Chain Backdoor Inserted into LiteLLM via Compromised Trivy CI/CD

Researchers have identified that the threat actor group TeamPCP compromised the Trivy container‑image scanner used in the LiteLLM CI/CD pipeline. By injecting malicious code into the open‑source LiteLLM library during the build process, they created a persistent backdoor that activates whenever the library handles a Large Language