LIVE FEED
LLM-Assisted Intrusions Hit Latin American Orgs via NextChat

LLM-Assisted Intrusions Hit Latin American Orgs via NextChat

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Palo Alto Unit 42

Unit 42 has identified two active intrusion campaigns targeting Latin American organisations in the transportation and financial sectors, with threat actors demonstrably leveraging commercial LLMs — including self-hosted NextChat instances — to orchestrate and refine attack execution. The campaigns share overlapping SOCKS5 relay infrastructure and exhibit iterative, AI-assisted scripting behaviour, suggesting independent but parallel adoption of LLM tooling by distinct threat groups. This represents a concrete operational example of adversaries using AI to lower the skill floor for multi-stage network intrusion and data exfiltration.

AI Agents Generate Custom Malware in Mexico, Brazil

AI Agents Generate Custom Malware in Mexico, Brazil

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 Dark Reading

Two threat campaigns targeting organisations in Mexico and Brazil have leveraged AI agents to dynamically generate customised hacking tools, marking a notable escalation in automated, AI-assisted cyberattacks. The use of AI agents for on-the-fly tool generation lowers the technical barrier for attackers and accelerates the attack cycle. This represents a concrete, in-the-wild demonstration of agentic AI being exploited as an offensive capability.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.