DNS

Anthropic released a threat intelligence report detailing how state-sponsored and criminal actors used Claude to enhance cyber-espionage and hacking operations. The findings reveal that AI is being leveraged to automate vulnerability research and rapidly iterate malware to bypass traditional security defenses.

The article explores how SSRF vulnerabilities arise when the security verdict of a URL validator is not preserved through the entire request lifecycle. It identifies specific 'handoff' points where discrepancies between parsers and clients can lead to unauthorized access to internal resources.

Citizen Lab has uncovered sophisticated global surveillance campaigns that leverage vulnerabilities in mobile signalling protocols like SS7 and Diameter. These actors use customized tools to spoof operator identities and manipulate network traffic to track high-profile targets worldwide.