JPCERT finds attackers used AI to scan vulnerabilities and exploit APIs in breach campaign
cyb3rops · x · 2026-10-17
JPCERT/CC analyzed attack-source servers behind a wave of breaches at multiple Japanese organizations and confirmed attackers used AI for known-vulnerability scanning and API-based attacks.
- One server held traces of APK analysis targeting mobile app APIs for SSRF flaws, including a Python verification script
- Another showed Flutter reverse-engineering (Blutter) and jadx/apkextract artifacts
- A third involved MySQL, Jenkins, mail-gateway attack tooling, EDR bypass attempts, and web shells suggesting intranet penetration
- The infrastructure also targeted web services outside Japan
More from Safety
- xAI whistleblower: boss said AI safety was useless because "AI would kill us all anyways" — GarrisonLovely · 2026-10-17
- SecureBio clarifies its independence in responding to Anthropic's independent evaluators update — Miles_Brundage · 2026-10-17
- AI safety figure slams new bill as not representing the safety community — ShakeelHashim · 2026-10-17
- Paper: AI agent design centers the agent, undermining human oversight — math_rachel · 2026-10-17
- Debate: should frontier model 'dangerous capability' evals be framed publicly? — repligate · 2026-10-17
- Anthropic quietly pitches its own AI safety bill — and it guts agency power — ShakeelHashim · 2026-10-17