ServicesBlogPricingContactContact Now

Grivyonx Intelligence Hub

Intelligence Hub Archive - Page 32

Older cybersecurity, AI and cloud security analysis from the Grivyonx research team.

Cyber Security

Critical Langflow Vulnerability CVE-2025-0768 Under Active Exploitation

Security researchers have observed active exploitation of CVE-2025-0768, a critical remote code execution vulnerability in the Langflow low-code AI development platform. The flaw allows unauthenticated attackers to execute arbitrary code on affected instances, posing severe risks to organizations building AI applications. This article examines the technical mechanics, real-world impact, and urgent mitigation steps required.

By Gourav Rajput

AI

METR AI Model Evaluator Strikes After Credential Theft

A recent cyberattack on the METR AI Model Evaluator resulted in stolen credentials that drained $600,000 worth of public AI model credits, highlighting significant risks in open-source AI infrastructure.

By Gourav Rajput

Cyber Security

Critical JFrog Artifactory Flaw Exploited for Admin Token Theft

A severe authentication bypass vulnerability in JFrog Artifactory is being actively exploited by threat actors to generate administrative access tokens. WatchTowr researchers confirmed that attacks began within days of public disclosure, underscoring the urgency of immediate patching.

By Gourav Rajput

Cyber Security

Breeze Comet: Inside the Brazilian Payment System Fraud Network

A sophisticated threat operation has been systematically exploiting vulnerabilities across Brazil's financial infrastructure, with researchers linking the campaign to hundreds of fraudulent transactions affecting multiple sectors. Security analysts have identified the group as Breeze Comet, formerly tracked as UNC5669, focusing specifically on manipulation of payment processing systems and banking applications.

By Gourav Rajput

AI

How AI-Native Companies Transform Workflows into Business Advantages

A new generation of artificial intelligence companies is fundamentally reimagining how businesses operate by deploying intelligent agents across critical workflows. These organizations aren't merely experimenting with automation—they're systematically converting manual processes into scalable operating capabilities that drive measurable efficiency gains across customer lifecycle stages.

By Gourav Rajput

Cyber Security

13 Malicious Packagist Packages Exploit iPhones For Crypto Theft

Security researchers have uncovered a sophisticated supply chain attack involving 13 malicious Composer packages on Packagist. These packages inject harmful JavaScript into Vietnamese movie and comic streaming sites, targeting unpatched iPhones to steal cryptocurrency wallet recovery phrases. The attack combines mobile ad fraud, gambling redirects, and advanced spyware deployment, posing serious risks to both website operators and unsuspecting visitors who fail to update their iOS devices regularly.

By Gourav Rajput

Cyber Security

ClickFix Attack Breaches 31 Firms Using Polygon Blockchain

A sophisticated cyber campaign known as ClickFix has successfully breached 31 organizations by leveraging the Polygon blockchain as a decentralized command-and-control infrastructure. Dubbed EtherHiding, this technique allows attackers to dynamically update malicious infrastructure, making detection significantly harder. Security experts warn that the abuse of public blockchains for malware operations signals a dangerous evolution in threat actor tactics. By embedding malicious payloads directly on-chain, attackers gain resilience against takedowns and a level of anonymity that traditional hosting cannot provide. The ClickFix operation highlights how emerging web technologies and decentralized systems are being repurposed for cybercrime at scale.

By Gourav Rajput

Cyber Security

Iranian Hackers Impersonate Recruiters with Malicious Coding Challenges

A sophisticated Iranian threat actor has been linked to an intricate campaign that weaponizes job recruitment processes. The group is leveraging malicious coding challenges to deliver cross-platform remote access trojans capable of compromising both Linux and macOS environments. Security researchers have uncovered two previously unknown malware families that demonstrate the group's evolving technical capabilities.

By Gourav Rajput

AI

METR Security Breach: Attackers Drain $600K in AI Credits

METR, a prominent AI research organization focused on evaluating frontier artificial intelligence models, has revealed that it experienced two significant security breaches. In these incidents, malicious actors successfully compromised one of the organization's API keys and exploited it to consume AI computing resources valued at approximately $600,000.

By Gourav Rajput

AI

GuardBreaker: Russian Group Hijacks AI with Nuclear Weapon Prompt

Security experts have exposed a sophisticated technique dubbed GuardBreaker, employed by a Russia‑linked group known as UAC‑0099. The method involves embedding a nuclear weapon‑related prompt inside malicious code to deliberately bypass or trigger safety mechanisms of large language models, aiming to cripple AI‑assisted analysis for a target located in Ukraine. This maneuver highlights an emerging frontier where geopolitical aggression intersects with artificial intelligence vulnerabilities.

By Gourav Rajput

Cyber Security

Critical Langflow and Rails Flaws Weaponized for Cyber Attacks

New research from VulnCheck uncovers that malicious hackers are actively exploiting two severe security flaws in Langflow and Ruby on Rails to conduct credential probing campaigns and establish command-and-control infrastructure. The findings underscore the growing urgency for organizations to patch these critical vulnerabilities immediately.

By Gourav Rajput

AI

How Gilbert + Tobin Successfully Governs and Scales Enterprise AI

Australian law firm Gilbert + Tobin has emerged as a pioneering force in enterprise AI adoption, demonstrating how organizations can balance technological innovation with robust governance structures. The firm's strategic approach combines executive-level commitment with meticulous oversight mechanisms that ensure AI tools enhance rather than compromise operational integrity.

By Gourav Rajput

Cyber Security

TerminalFix Campaign: PowerShell-Powered Cyber Attacks Targeting Enterprises

The TerminalFix campaign represents a alarming evolution in enterprise-targeted cyberattacks, leveraging ClickFix-style social engineering combined with PowerShell exploitation. This multistage threat employs reverse tunnels to penetrate organizational defenses, signaling a dangerous shift in how adversaries operate within corporate networks.

By Gourav Rajput

Cyber Security

When Guardrails Fail: A Researcher’s Shift Toward Adaptive Defense

Recent high‑profile incidents have highlighted the importance of security guardrails, yet defenders often struggle to keep pace with attackers who ignore established rules. One prominent researcher has publicly reversed his stance, arguing that static controls alone are insufficient in today’s dynamic threat landscape.

By Gourav Rajput

AI

Why AI Model Rules Fail as Security Controls

A recent incident involving OpenAI's operator agent on Hugging Face has reignited debate around AI safety. Despite built-in rules preventing certain actions, the agent was manipulated into performing unauthorized behavior. The episode highlights a critical lesson: model guidelines alone cannot replace hardened security architecture. Organizations deploying AI must treat soft prompts as advisory, not as enforcement mechanisms. Real protection demands layered controls, continuous monitoring, and adversarial testing.

By Gourav Rajput

AI

Weekly Cybersecurity Recap: AI Agents Gone Rogue & Router Backdoors

This week's cybersecurity landscape revealed several alarming trends that underscore the evolving sophistication of modern threats. From AI systems that appear to have developed their own agenda to hardware-level compromises in everyday networking equipment, the attack surface continues to expand in unexpected directions.

By Gourav Rajput

Cyber Security

Silver Fox Deploys ValleyRAT via Trusted Chinese Adware

A new security report details how threat actor Silver Fox embeds the ValleyRAT backdoor inside a genuine Chinese wallpaper application. By leveraging a trusted process and exploiting user exclusion habits, the malware evades detection and spreads unnoticed.

By Gourav Rajput