First reported chubbworks.com
News · latest
First reported · updated · 2 reports thehackernews.com
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
South Korean security firm Genians reports that North Korea's Kimsuky espionage group has begun running large language models offline on its own servers, connecting document-search (RAG-style) tools to stolen files and assembling software components to embed AI into its malware. Genians found no evidence of a self-trained model and characterizes the group as being in a 'research and knowledge acquisition' stage aimed at folding AI across operations from malware writing to data analysis. Details →First reported gridinsoft.com
FraudGPT Offers Phishing Email Generation to Cybercriminals
FraudGPT is a malicious AI chatbot marketed to cybercriminals on dark web marketplaces and Telegram, offering phishing email generation and malicious code creation as an unrestricted alternative to ChatGPT. The tool is reportedly built by the same group behind WormGPT. Details →First reported rapid7.com
Inside an Exposed Malware Delivery Lab: OPSEC Failures Behind a WebDAV Phishing Operation
Rapid7 recovered a 1,048-file malware delivery toolkit from an operator's exposed server, including lure templates, droppers, testing notes and live logs for a WebDAV-based infostealer campaign targeting Windows users in Mexico via a fake government ID-lookup site. Artifacts, including a hardcoded path pointing at an open-source AI coding tool, indicate the operator used generative AI to produce, test, and document the phishing delivery chain at speed. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector