Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

Hong Kong‑Based Scan Surge Signals Coordinated Reconnaissance Campaign

Hong Kong‑Based Scan Surge Signals Coordinated Reconnaissance Campaign

GreyNoise reported a sudden rise in previously unseen scanning IPs, with roughly 50 % of the traffic geolocated to Hong Kong. Unlike typical opportunistic scans, the attempts showed a uniformly low connection success rate and followed a repeatable pattern, suggesting a deliberate, systematic probing effort rather than random background noise. The

Vulnerabilities & Exploits

New SSH/Telnet Scans, OpenSSL Exploit, and Ransomware‑Driven DDoS Spike Alert

New SSH/Telnet Scans, OpenSSL Exploit, and Ransomware‑Driven DDoS Spike Alert

The SANS Internet Storm Center observed a sharp rise in automated scans targeting SSH and Telnet services, primarily originating from IP ranges in East Asia. At the same time, a previously unknown exploit against legacy OpenSSL libraries began circulating, capable of triggering remote code execution on vulnerable servers still running

Threat Intelligence

Inside the Cybercrime‑as‑a‑Service Marketplace: How Crime Kits Are Bought and Sold

A recent arXiv scoping review systematically mapped the Cybercrime‑as‑a‑Service (CaaS) ecosystem, detailing its tiered structure, service categories, and the economics that keep it running. The study shows that criminal actors can acquire ready‑to‑deploy ransomware kits, phishing toolkits, and botnet rentals from semi‑legitimate online marketplaces

Unprotected API Leak Exposes 2.5 Million Student Loan Records

Unprotected API Leak Exposes 2.5 Million Student Loan Records

An attacker exploited an unauthenticated API endpoint on a major student loan servicer’s database, pulling personal information for roughly 2.5 million borrowers. The vulnerable endpoint allowed bulk extraction of records and went unnoticed for several weeks before security teams discovered the activity. The breach released names, Social Security

AI Security & Threats

OpenClaw AI Agent Hijacked for Automated Malware Delivery

OpenClaw AI Agent Hijacked for Automated Malware Delivery

Researchers observed that the OpenClaw AI agent ecosystem—originally built for legitimate automation tasks—has been repurposed by threat actors to embed malicious binaries. These payloads automatically download and execute ransomware and information‑stealing tools once the agent is triggered. VirusTotal data and subsequent analysis uncovered multiple active campaigns that

Malware & Ransomware

CanisterWorm Wiper Strikes Iranian Critical Infrastructure, Erases Data After Disabling Backups

CanisterWorm Wiper Strikes Iranian Critical Infrastructure, Erases Data After Disabling Backups

A fresh campaign of the CanisterWorm wiper has been observed targeting Iranian government and energy‑sector networks. Attackers first compromise accounts using stolen SSH credentials and inject malicious code into legitimate software updates, gaining persistent footholds. Once inside, the malware disables backup services and then proceeds to overwrite files, effectively

AI Security & Threats

Wikipedia AI Editing Test Signals New Disinformation Automation Threat

Wikipedia AI Editing Test Signals New Disinformation Automation Threat

Malwarebytes disclosed that Wikipedia is piloting an AI‑driven editing agent capable of generating and updating article content without human oversight. While the experiment aims to streamline maintenance of the encyclopedia, security researchers quickly highlighted that the same technology could be weaponized to insert false narratives, manipulate citations, or amplify