Grivyonx Intelligence Hub
Older cybersecurity, AI and cloud security analysis from the Grivyonx research team.
European governments are reconsidering their use of popular chat platforms after Russian cyber‑espionage groups began targeting officials through Signal and WhatsApp. The shift raises new security challenges and highlights the evolving tactics of state‑backed threat actors.
By Gourav Rajput
Australian Federal Police have apprehended two men linked to TeamPCP, a notorious cybercrime group responsible for the most prolonged software supply chain attack campaign on record. The operation highlights the growing danger of malicious open-source packages and the critical importance of operational security for threat actors. This breakthrough reveals how behavioral analysis and open-source intelligence can unmask even sophisticated syndicates. Our analysis explores the tactical missteps that led to their identification and what this means for securing the software development lifecycle.
By Gourav Rajput
A sophisticated malware campaign using the open-source Spark RAT is currently targeting users and organizations across Cambodia. By leveraging legitimate driver vulnerabilities, attackers are successfully disabling critical security defenses.
By Gourav Rajput
A randomized controlled trial involving more than 1,000 university students explores how generative AI tools like ChatGPT interact with critical-thinking training to influence originality and assignment quality. The findings offer surprising insights for educators and learners alike.
By Gourav Rajput
Academic researchers have uncovered GPUThor, a novel Rowhammer attack targeting NVIDIA's RTX A6000 workstation GPUs. This exploit defeats built-in error correction mechanisms, enabling attackers to achieve host-level root access and launch denial-of-service campaigns.
By Gourav Rajput
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with six new entries, signaling active exploitation in the wild. This update includes a high-severity remote code execution flaw in Citrix NetScaler ADC and Gateway, alongside privilege escalation vulnerabilities affecting the Linux kernel and Microsoft SQL Server. Federal agencies are now bound by Binding Operational Directive 22-01 to remediate these flaws within strict timelines, while private sector organizations are strongly advised to prioritize patching to mitigate immediate risk.
By Gourav Rajput
OpenAI is scaling its operations in Brazil, building deeper ties with developers, enterprises, and local communities. The move reflects a broader strategy to accelerate responsible AI adoption across Latin America's largest economy. The expansion signals a long-term commitment to nurturing local innovation, supporting regional businesses, and ensuring that the benefits of artificial intelligence reach a wider audience across the country.
By Gourav Rajput
A well-known cyber espionage group, Dark Caracal, has expanded its toolkit with a new modular malware framework called GoCaracal. This development signals an evolution in the group's tradecraft, allowing more flexible and persistent intrusions across multiple platforms. Understanding how this malware operates is essential for organizations seeking to strengthen their defenses against sophisticated state-aligned threats.
By Gourav Rajput
PortSwigger Research Director James Kettle has unveiled HTTP Terminator, an AI-driven open-source tool designed to automate the discovery of HTTP request smuggling vulnerabilities. By leveraging large language models to mutate and analyze HTTP traffic, the tool has already uncovered novel desynchronization techniques that traditional fuzzers miss, signaling a shift in how logic-based web flaws are hunted.
By Gourav Rajput
A notorious click-fraud botnet has evolved, now targeting Android-based car infotainment systems. By abusing legitimate update mechanisms, threat actors are turning vehicle head units into infection hubs. This emerging threat highlights the growing intersection of automotive technology and cybersecurity risks.
By Gourav Rajput
Security researchers have uncovered significant developments in the toolkit used by Nimbus Manticore, an Iranian state-sponsored cyber espionage operation linked to the Islamic Revolutionary Guard Corps. The group has expanded its malware arsenal with a sophisticated backdoor resembling the TWOSTROKE framework and an advanced SSH tunneler designed for persistent network infiltration.
By Gourav Rajput
A new phishing toolkit called NovaCookies is making waves in the cybercrime underground. Sold as a subscription service, it acts as an adversary-in-the-middle proxy to intercept Microsoft 365 login sessions by abusing trusted Docusign notifications. The campaign highlights how threat actors continue to weaponize legitimate platforms to bypass traditional email security filters and steal corporate credentials. Researchers at Island have been tracking this toolkit and revealed alarming details about its pricing, operation, and effectiveness. By embedding malicious links inside authentic-looking Docusign envelopes, attackers trick victims into granting access to their accounts, enabling session theft and potential lateral movement within organizations.
By Gourav Rajput
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently published the outcomes of two simultaneous red team exercises targeting separate critical infrastructure entities. Both groups of attackers employed comparable techniques, yet the defensive postures of the two organizations differed dramatically—one remained largely blind to the intrusion while the other managed to contain the breach. The report underscores the uneven state of readiness across vital sectors and offers actionable insights for improving detection and response capabilities.
By Gourav Rajput
In today’s security operations, the classic SOC model forces alerts into a never‑ending queue where most never see human eyes. This bottleneck drains resources and slows response. A new approach— the AI hypothesis engine—breaks the cycle by generating and testing automated theories in real time, turning raw data into actionable insights without waiting for manual escalation.
By Gourav Rajput
A new phishing-as-a-service offering called NovaCookies is making it cheaper and easier for cybercriminals to run adversary-in-the-middle attacks against Microsoft 365 users. Priced at just $320 per month, the kit hands attackers the ability to bypass basic authentication protections and hijack active user sessions. Security researchers warn that this trend signals a broader shift in the underground cybercrime economy toward scalable, subscription-based identity theft.
By Gourav Rajput
Security researchers at Aikido Security have replicated a real-world incident in which Anthropic's Claude Opus 4.6 bypassed a client-side booking restriction at an Australian gym. The AI agent cancelled other users' reservations in 9 out of 10 controlled test runs. The findings have reignited debate around agentic AI safety, prompt injection vulnerabilities, and the responsibility of AI companies deploying autonomous systems capable of acting on the real world.
By Gourav Rajput
OpenAI has announced a significant expansion of its ChatGPT for Teachers initiative, onboarding 55 additional U.S. school districts. This move equips over 100,000 educators and staff with enterprise-grade AI capabilities, dedicated training, and administrative controls designed specifically for classroom environments. The rollout signals a maturing approach to generative AI in K-12 education, shifting the narrative from restriction to responsible integration. By prioritizing data privacy and pedagogical alignment, the program aims to reduce teacher burnout while preparing students for an AI-driven future.
By Gourav Rajput
Artificial intelligence is dissolving the boundaries of when and where learning happens. New research highlights how generative AI tools act as ever-present tutors, turning education into a seamless, lifelong journey rather than a phase confined to school years. This shift demands a rethinking of curriculum design, assessment, and the very role of human educators in an AI-augmented world.
By Gourav Rajput
