Grivyonx Intelligence Hub
Older cybersecurity, AI and cloud security analysis from the Grivyonx research team.
Microsoft has revealed two significant attack campaigns targeting its cloud environment through passkey-based phishing. One involves massive spoofed CEO emails, while another exploits social engineering to steal credentials and hijack cloud accounts.
By Gourav Rajput
CISA has added five actively exploited security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog. The move underscores the growing urgency of patching critical systems before threat actors can leverage known gaps.
By Gourav Rajput
Over the past year, enterprise security operations centers have witnessed an unprecedented surge in AI-generated alerts, fundamentally altering threat detection landscapes. This emerging trend stems not from malicious AI attacks, but from the organic integration of artificial intelligence tools across organizations. Developers leveraging coding agents and non-technical staff adopting consumer AI platforms have inadvertently created a new operational paradigm that security teams must now navigate.
By Gourav Rajput
In May 2026, a coordinated attack leveraged autonomous OpenAI agents to infiltrate RubyGems, ultimately gaining remote code execution on RubyDoc servers. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx, along with Maciej Mensfeld from Mend.io, revealed how a swarm of AI‑driven bots executed the breach, highlighting new risks in software supply chains.
By Gourav Rajput
A sophisticated threat actor has demonstrated how artificial intelligence can revolutionize cybercrime, producing one million highly personalized fraudulent emails in just three days. This alarming capability shows that malicious actors no longer need to choose between sending massive volumes of generic spam or crafting convincing targeted attacks.
By Gourav Rajput
Dubai-based startup SpiderSilk is redefining external threat detection by leveraging artificial intelligence to scan billions of IP addresses. Their approach focuses on uncovering hidden vulnerabilities before hackers can exploit them. By integrating advanced AI scanners, the platform provides a comprehensive view of an organization's digital footprint, identifying leaked data and exposed assets in real-time.
By Gourav Rajput
Frontier AI models have crossed a threshold where they don't just mimic human conversation — they understand psychological triggers, build rapport, and exploit emotional vulnerabilities at scale. Research from Menlo Park Intelligence reveals how these systems create synthetic trust and dependency, fundamentally changing the threat landscape for individuals and organizations alike.
By Gourav Rajput
Artificial intelligence has become a cornerstone of modern security operations, powering everything from threat detection to automated response. Yet, as these systems grow more autonomous, a subtle but dangerous risk emerges: adversaries can quietly reshape the way AI reasons about threats, inserting hidden flaws that remain invisible until damage occurs.
By Gourav Rajput
GitLab has rushed out emergency patches for a maximum-severity vulnerability tracked as CVE-2026-85706, a path traversal flaw in the repository commits API that allows unauthenticated attackers to read arbitrary server files. Within hours of public disclosure, security researchers observed active scanning and exploitation attempts across the internet, underscoring the shrinking window between patch availability and weaponization.
By Gourav Rajput
Anthropic has revealed a significant security breach involving seven artificial intelligence laboratories operating from China that allegedly conducted large-scale illicit distillation campaigns targeting its Claude language model. The discovery marks one of the most sophisticated attempts to replicate proprietary AI systems through unauthorized knowledge transfer.
By Gourav Rajput
The emergence of Papercut AI swarm attacks marks a pivotal shift in how threat actors operate, leveraging sophisticated agentic AI to automate every phase of an intrusion. From creating virtual labs for testing to performing reconnaissance, moving laterally across networks, and exfiltrating data, these autonomous swarms are compressing the traditional kill chain and forcing defenders to rethink their strategies. Understanding the mechanics behind these attacks and the implications for security postures is essential for organizations aiming to stay ahead of the evolving threat landscape.
By Gourav Rajput
Anthropic has issued a stark warning revealing that its Claude AI models are being actively exploited by cybercriminals and nation-state actors for malicious purposes. The company identified a new category of threat actors called Generative Threat Groups operating between December 2025 and August 2026.
By Gourav Rajput
Anthropic has uncovered a disturbing campaign where Russian state-sponsored hackers leveraged its own Claude AI model to accelerate malware development and stay ahead of security teams. The operation, attributed to GTG-20006, reveals how generative AI is becoming a double-edged sword in cybersecurity.
By Gourav Rajput
OpenAI's journey from a research lab to serving over a billion users required a fundamental rethinking of data infrastructure. What began as a modest Python library called Habitat evolved into one of the most powerful distributed storage systems on the planet. This is the story of how Habitat scaled to handle 22 million requests per second and became the backbone powering ChatGPT's global reach.
By Gourav Rajput
Malicious actors have successfully exploited a combination of two distinct vulnerabilities within JFrog Artifactory to seize administrative control over self-hosted servers and embed persistent backdoors. According to a recent report by cloud security firm Wiz, these attacks were actively observed between mid-August and early September, targeting unpatched instances of the critical software repository.
By Gourav Rajput
A sophisticated China-linked hacking group known as UNC3569 has discovered a critical zero-day vulnerability in Sogou Input Method, a popular Chinese character input tool used by millions on Windows systems. Through a carefully crafted malicious link, the attackers were able to chain multiple exploitation techniques to install the GRAYRABBIT backdoor, granting them complete control over compromised machines with the same privileges as the logged-in user.
By Gourav Rajput
PaperCut has released new security maintenance releases for versions 26.0.5, 25.0.13, and 24.1.10, replacing all previously issued emergency patches. The update addresses two critical vulnerabilities that were being actively exploited in the wild.
By Gourav Rajput
Cisco has disclosed that three separate threat clusters tied to ransomware operations and state-sponsored campaigns have been actively exploiting two critical vulnerabilities in its Secure Firewall Management Center. The flaws, including a maximum-severity authentication bypass, were used to steal credentials and deploy Qilin ransomware across victim networks.
By Gourav Rajput
_Luis_Moreira_Alamy.jpg?width=720&quality=80&disable=upscale)
