Javier Conejo del Cerro

Artificial intelligence is no longer limited to assisting defenders or accelerating software development. Researchers from Palo Alto Networks’ Unit 42 have uncovered a campaign in which a Chinese-speaking threat actor leveraged DeepSeek through the open-source Hermes Agent framework to autonomously search for vulnerable systems, select exploits, adapt attack paths, and execute operations after receiving a single instruction via Telegram. The operation demonstrates how AI agents are evolving...

Critical infrastructure is designed with one objective above all others: continuity. The coordinated cyberattacks against more than thirty Minnesota water systems demonstrate that modern attackers increasingly focus not on destroying essential services, but on disrupting the systems that quietly keep them running every day. When operational technology becomes the target, even limited interruptions can have consequences far beyond the network itself. Phase 1 – Targeting Operational Technology...

Not every critical exploit begins with sophisticated malware or remote access. Sometimes, it begins with timing. The newly disclosed CVE-2026-53264 demonstrates how a race condition inside the Linux kernel’s traffic-control subsystem can transform an ordinary local user into root. While the attack requires specific conditions and an existing foothold, the publication of reliable exploit code—and the researcher’s use of AI to accelerate vulnerability discovery and exploit development—marks...