Archive

Hackers are reportedly compromising Android-based car systems and using them as proxy infrastructure for a botnet. For defenders, this raises exposure in connected vehicles and adjacent telecom or network environments, and it adds pressure to inventory embedded Android deployments and monitor them for abuse.

A threat actor tracked as UAT-10147 is using AI to increase the scale of server attacks and is deploying malware that includes EDR bypass and a Linux rootkit. For defenders, this raises exposure across server fleets and Linux environments and increases the need to harden detection, endpoint controls, and server-side monitoring.