Security

A threat actor used the open-source Hermes AI assistant to automate reconnaissance after breaching Thailand’s Ministry of Finance. Here’s what happened, why it matters, and what defenders should learn from it. Someone rented a server in Hong Kong, flipped a switch labeled “YOLO,” and pointed an AI agent at Thailand’s Ministry of Finance. What happened … Read more

Pentera Labs showed how attackers could abuse a compromised Claude account and synced settings to gain command execution—not by exploiting a software bug, but by leveraging trusted AI workflows You trust Claude to handle your sensitive conversations. But what if that trust is exactly what hackers are counting on? Pentera Labs researchers proved it. They … Read more