Healthcare Sector
- MyChart Portal Phishing Scams Target Patients Nationwide
"Dozens of U.S. healthcare systems are warning patients about potential email phishing, text and phone scams involving their MyChart patient portals. Electronic health record vendor Epic, the maker of MyChart, has also issued a public warning about the threats. The phishing campaigns involve fraudsters using the MyChart name and logo to appear legitimate in their scam messages. The communications promise the patients a "2026 MyChart Senior Health Package," Medicare wellness benefits, a free health kit or other gifts when recipients "claim their reward" by clicking a link, confirming an address or providing other personal information."
https://www.bankinfosecurity.com/mychart-portal-phishing-scams-target-patients-nationwide-a-32651
Industrial Sector
- Siemens SIMATIC IoT2050 Advanced
"SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-03 - Ebyte NE2-D11
"Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose sensitive information, modify device configuration, hijack authenticated sessions, and disrupt device operation."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06 - Zoneminder
"Successful exploitation of this vulnerability could result in full Remote Code Execution (RCE) as the web server user."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-02 - PayRange API
"Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose sensitive information, arbitrarily modify the device to cause a denial of service, or alter a devices displayed image."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-04 - FURUNO FA-50 Class B AIS Transponder
"Successful exploitation of these vulnerabilities could allow an attacker to alter device settings."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-07 - Threat Landscape For Industrial Automation Systems. Q2 2026
"In this section, we examine the most significant changes to indicators over the quarter, broken down by region and industry. Further diagrams can be found in the relevant chapters of the “Statistics across all threats” section."
https://ics-cert.kaspersky.com/publications/reports/2026/08/25/threat-landscape-for-industrial-automation-systems-q2-2026/ - Rently Smart Home
"Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01 - Bendix EC80 Brake ECU
"Successful exploitation of these vulnerabilities could allow an attacker to cause the loss of ABS functions, steering assist, speedometer, shifting capabilities, or disable automatic traction control."
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05
New Tooling
- HOL Guard: Open-Source Antivirus For AI Agents
"HOL Guard is a free, open-source tool that sits between an AI assistant and the computer it runs on. When the assistant tries something risky, the tool pauses it and asks you first. It installs in about a minute, runs on your own machine, and a typical check takes under 50 milliseconds. Your files are never uploaded, and the whole thing works with no internet connection. The people exposed here are anyone using Claude Code, Cursor, Codex, Gemini CLI, OpenCode, Hermes, or OpenClaw."
https://www.helpnetsecurity.com/2026/08/25/hol-guard-open-source-antivirus-ai-agents/
https://github.com/hashgraph-online/hol-guard
Vulnerabilities
- Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute In Edit Mode
"Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA record says the command can run as a local subprocess when the notebook is opened in edit mode. The vulnerability, tracked as CVE-2026-75149, is a code injection issue affecting versions prior to 0.23.15. VulnCheck's CVE Numbering Authority (CNA) record assigns it a CVSS v4 score of 8.7 and a CVSS v3.1 score of 8.8, with user interaction required and no attacker authentication required."
https://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.html - CISA Adds One Known Exploited Vulnerability To Catalog
"CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CVE-2026-60004 Gitea Code Injection Vulnerability"
https://www.cisa.gov/news-events/alerts/2026/08/25/cisa-adds-one-known-exploited-vulnerability-catalog - Drive-By Agent Hijacking: One Website Visit, Persistent Model Poisoning
"A vulnerability in NVIDIA NemoClaw, a tool that deploys the OpenClaw AI agent, can hand an attacker full, unauthenticated control over the local model server that powers the agent and silently plant instructions inside the model. A single visit to an attacker-controlled webpage is all it takes to give the attacker these capabilities. NemoClaw deploys inside NVIDIA OpenShell sandboxes with local inference via Ollama. Oasis Security discovered the vulnerability as part of ongoing research into non-human identity and AI agent risks."
https://www.cyera.com/research/nemoclaw-one-website-visit-to-hijack-your-ai-agent
https://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.html
https://www.darkreading.com/cyber-risk/nemo-claw-networking-llm-poisoning-openclaw - Vulnerability In GNU Wget Software
"CERT Polska has received a report about vulnerability in GNU wget software and participated in coordination of its disclosure. The vulnerability CVE-2026-16599: GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network attacker positioned to intercept FTP traffic can send a crafted OPIE challenge with a sequence number near INT_MAX, causing wget to perform up to approximately 2.1 billion MD5 computations and suspend for some time. The --timeout option does not mitigate this because it applies only to network I/O, not CPU computation."
https://cert.pl/en/posts/2026/08/CVE-2026-16599/
Malware
- ClickFix Phishing Pages Discovered In 24 Npm Packages
"The OX Research team is tracking a fake Cloudflare campaign being distributed on the npm registry: Our research found a total of 24 packages containing the same HTML page, with each package usually reaching between 50-300 weekly downloads before it gets removed. But downloading and installing such a package to a machine doesn’t do any harm, so why do we bother researching it? While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn’t do harm, the threat actor’s use of npm isn’t to infect developers who install it, but to use the registry and its mirrors as a safe, validated storage for the malware."
https://www.ox.security/blog/research-clickfix-phishing-npm-packages/
https://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-mirrors-to.html
https://www.bleepingcomputer.com/news/security/hackers-abuse-npm-mirrors-to-host-phishing-redirect-pages/ - Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain
"The SOCRadar Threat Research Unit (STRU) has conducted an “inside-out” analysis of AnonyMousKIT, an AI-powered Phishing-as-a-Service (PhaaS) ecosystem specifically engineered to disable Apple’s Activation Lock on stolen devices. Operating as a credit-metered platform, AnonyMousKIT automates credential harvesting through a sophisticated multi-channel pipeline – integrating email, SMS, and WhatsApp with advanced conversational AI agents to conduct AI-driven Automated Social Engineering (voice phishing) calls. By leveraging a critical flaw – the use of bare relative paths – the investigation unraveled a reseller supply chain of 506 domains and 168 storefront brands active since early 2024. Despite leveraging advanced AI to mimic “Apple Support,” basic coding errors exposed production logs and operator rosters."
https://socradar.io/blog/anonymouskit-ai-phaas-supply-chain/
https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/ - Massive DDoS Attack Disrupts Norway’s Government Digital Services
"A large distributed denial-of-service (DDoS) attack has disrupted Norway’s shared government digital infrastructure since Monday, affecting services used by the public sector. The attack started at 03.38 CEST on Monday and has targeted the infrastructure supporting services operated by the Norwegian Digitalization Agency, Digitaliseringsdirektoratet (Digdir), and its operations provider, Vivicta. Digdir operates Norway’s shared digital government infrastructure, including public-service logins, electronic IDs and signatures, secure digital mail, government forms, public-record access, and data exchange between agencies."
https://www.bleepingcomputer.com/news/security/massive-ddos-attack-disrupts-norways-government-digital-services/
https://therecord.media/norway-cyberattack-ddos-government
https://securityaffairs.com/197826/cyber-warfare-2/norway-s-digital-government-infrastructure-hit-by-a-new-ddos-attack.html - Check Point Blocks Large-Scale Debt-Relief Email Phishing Campaign Targeting More Than 9,000 Organizations
"Check Point has identified and blocked a large-scale email phishing campaign using fraudulent financial hardship and debt-relief offers to manipulate recipients into calling attacker-controlled phone numbers. Over the past 14 days, Check Point observed approximately 24,700 emails associated with the campaign targeting users across more than 9,000 organizations, demonstrating both the scale of the operation and the continued evolution of phishing beyond malicious links and attachments. The campaign underscores a growing enterprise risk: phishing no longer needs an obvious malicious link, attachment, or spoofed sender to be effective. Attackers are turning routine-looking email into the entry point for trusted conversations that take users beyond traditional controls."
https://blog.checkpoint.com/securing-user-and-access/check-point-blocks-large-scale-debt-relief-email-phishing-campaign-targeting-more-than-9000-organizations/ - An Invisible HTML Payload Silently Hijacked Every Email Summarizer Run
"Indirect prompt injection has moved from academic exercise to field-deployed threat. Forcepoint X-Labs previously demonstrated how multi-agent email pipelines can be manipulated through PromptSpy and identified real IPI attacks in the wild. This post presents a measured laboratory proof of concept: we isolated a single email summarizer running an unguarded LLM pipeline, embedded a hidden prompt injection payload using common HTML concealment techniques, and ran both benign and injected emails through the system with pre-registered success criteria. The results confirm that indirect prompt injection can silently hijack summarizer output without signaling tampering to the reader."
https://www.forcepoint.com/blog/x-labs/html-payload-hijacks-email-summarizer
https://www.darkreading.com/cyber-risk/hidden-prompts-trick-ai-false-email-summaries - ZeroTokens: Phishing Platform Gives Operators Real-Time Control Of Attack Flow
"ZeroTokens is a phishing platform built for financial institution impersonation at significant scale, combining reusable infrastructure with institution-specific verification sequences across dozens of financial brands. ZeroTokens operates less like a conventional phishing kit and more like a scam call center running through the target’s browser. A human operator watches each session unfold, sees information as the target enters it, and decides which prompt appears next. In parallel, the operator can use that information in a separate session with the genuine financial institution, coordinating the two interactions in near real time without proxying the bank."
https://abnormal.ai/blog/zerotokens-real-time-phishing-platform
https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ - Extended Rapid Response: Zimperium Identifies RecruitTrap Recruit Scams Are Targeting Enterprise Credentials On Mobile
"The recent research on The Growing Threat of Browser-in-the-Browser (BitB) Recruitment Scams highlights an escalating trend in social engineering: threat actors impersonate real HR personnel across multiple well-known companies to execute highly convincing, interview-themed phishing attacks. By scraping public profile data, attackers craft hyper-realistic scheduling flows designed to bypass traditional user skepticism. While desktop users encounter a simulated popup browser window (BitB), mobile devices present a unique vulnerability. On smaller screens, the attack automatically adapts, replacing the BitB frame with a full-screen counterfeit login page. Without traditional desktop browser chrome or visible URL bars, mobile victims have virtually no visual indicators to distinguish a fake login from a legitimate OAuth prompt."
https://zimperium.com/blog/extended-rapid-response-zimperium-identifies-recruittrap-recruit-scams-are-targeting-enterprise-credentials-on-mobile
https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ - Mirage2FA Surge Hits 4,500 US And EU Companies, Abusing Microsoft 365 Login Flows
"Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based."
https://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.html - SLEEPWALKER: A Passive Backdoor With Its Own Command Language
"Losing access to VirusTotal Intelligence at the start of the year was surprisingly productive. Unable to hunt for interesting new malware, I stopped adding to my “TODO” pile and finally worked through my backlog from last year. That led to a detailed examination of BeheMOF as well as the discovery of this malware. Upon closer inspection, a sample that did not seem too noteworthy at first turned out to have a distinctive design once I looked under the hood: a passive backdoor that opens no obvious listening port and carries no payload inside itself. It waits in memory doing nothing at all until one specifically crafted network packet reaches the machine, which is why I am calling it SLEEPWALKER."
https://r136a1.dev/2026/08/24/sleepwalker-a-passive-backdoor-with-its-own-command-language/
https://www.theregister.com/security/2026/08/24/you-dont-want-this-sleepwalker-backdoor-on-your-windows-machine/5292021
Breaches/Hacks/Leaks
- LACMA Data Breach Last Year Exposed Social Security And Medical Data
"The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. The museum says that on July 11, 2025, it detected suspicious activity on its systems that had started four days earlier. A month later, the investigation confirmed that the network was compromised. At the time, the type of exposed data could not be determined, and the first results of the investigation became available in late February 2026."
https://www.bleepingcomputer.com/news/security/lacma-data-breach-last-year-exposed-social-security-and-medical-data/ - Hospital Operator Nutex Health Says Data Stolen In Cyberattack
"Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. The organization has disclosed the cyberattack in a filing with the U.S. Securities and Exchange Commission (SEC), noting that the stolen data includes details that may be private or confidential. “Based on preliminary findings from the Company’s ongoing investigation, the Company believes that certain information maintained on the Company’s servers was accessed and exfiltrated by an unauthorized third party, including some information that may be private and/or confidential,” Nutex says."
https://www.bleepingcomputer.com/news/security/hospital-operator-nutex-health-says-data-stolen-in-cyberattack/ - Hackers Breached Over 270 Zimbra Servers In Ongoing Attacks
"Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. The ZCS email and collaboration suite is used by hundreds of millions of people and organizations, including thousands of businesses and hundreds of government agencies worldwide. Synacor patched the security flaw (tracked as CVE-2026-73570), which allows unauthenticated attackers to gain code execution remotely by exploiting a command injection weakness in the SNMP monitoring component when SNMP notifications are enabled, with the release of ZCS version 10.1.20 on July 20."
https://www.bleepingcomputer.com/news/security/hackers-breached-over-270-zimbra-servers-in-ongoing-attacks/
https://www.bankinfosecurity.com/zimbra-exploitation-spreads-as-thousands-stay-unpatched-a-32654
https://www.helpnetsecurity.com/2026/08/25/zimbra-cve-2026-73570-compromised/ - Employee Benefits Platform Paylogix Says Hackers Stole Financial And Health Data
"Hackers stole troves of sensitive information on tens of thousands of people from Paylogix, a tech company that provides benefits management tools to employers and insurance firms. The company has notified several state regulators this month and published its own notice of a security incident explaining that it experienced a cyberattack in the fall that disrupted its systems. An investigation revealed that hackers stole files from the company’s network between November 13 and November 18. Paylogix did not identify the hackers, but the company was added to the leak site of the Akira ransomware gang in January."
https://therecord.media/paylogix-cyberattack-akira-ransomware
General News
- AI Supply Chain Risk Is Showing Up In Developer Workflows First
"In this Help Net Security interview, Dr. Jaushin Lee, CEO of Zentera Systems, discusses where AI supply chain risk shows up. He says most incidents still hit developer workflows and open-source package repositories, while poisoned model weights and compromised MCP servers stay mostly in research demos. He explains why segmentation buys more risk reduction per dollar than tooling, where self-hosting a model falls short, and which semiconductor isolation practices software teams should copy. He also names the security belief he has since abandoned."
https://www.helpnetsecurity.com/2026/08/25/jaushin-lee-ai-zentera-systems-supply-chain-risk/ - A Tale Of Two SOCs: Insights From Two Red Team Assessments
"The Cybersecurity and Infrastructure Security Agency (CISA) conducted simultaneous red team assessments at two organizations and observed different defensive outcomes. In both environments, the red team achieved full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A failed to detect or contain the activity, but Organization B rapidly identified initial compromise attempts, isolated affected systems, and forced the red team into an assume breach model. This advisory details the red team’s activity and organizations’ defensive actions, offering lessons learned and mitigations to help critical infrastructure organizations strengthen detection, response, and protections in IT, cloud, and operational technology (OT) environments."
https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a
https://www.cisa.gov/sites/default/files/2026-08/aa26-237a-tale-of-two-SOCs-insights-two-red-team-assessments-508c.pdf
https://cyberscoop.com/cisa-red-team-report-government-water-cybersecurity/ - 58 Arrests In Global Effort To Dismantle West African Organized Crime Groups
"An eight-month operation targeting West African organized crime groups has led to 58 arrests and the identification of 263 suspects. Operation Jackal IV (November 2025 – June 2026) aimed to disrupt money laundering, identify high-value targets, seize assets, and support arrests and prosecution. The operation, which brought together 22 countries from six continents, is a response to the escalating global threat posed by West African criminal networks – such as the Black Axe and other similar groups. These groups are responsible for a significant share of the world's cyber-enabled financial fraud, typically through romance scams, cryptocurrency and investment scams or business email compromise fraud, as well as other serious and violent crimes."
https://www.interpol.int/News-and-Events/News/2026/58-arrests-in-global-effort-to-dismantle-West-African-organized-crime-groups
https://www.bleepingcomputer.com/news/security/police-arrests-dozens-of-suspects-in-global-cybercrime-crackdown/
https://therecord.media/58-arrested-international-cybercrime-crackdown-interpol
https://cyberscoop.com/interpol-operation-jackal-iv-black-axe-arrests/
https://www.helpnetsecurity.com/2026/08/25/interpol-jackal-iv-west-african-crime-groups-arrests/ - Most Organizations Declare Victory Over a Breach Too Early
"That is often the moment an organization wants to believe the worst is over. Services are restored. Customers can transact again. Executives can brief the board that operations have resumed. Communications teams can move from crisis language to recovery language. Operationally, that may be true. But from a security perspective, it's often premature. One of the most persistent weaknesses among incident response teams is their tendency to confuse service restoration with breach recovery. The organization rebuilds servers, restores applications, re-enables user access and resumes business processes. But the deeper questions remain unresolved."
https://www.bankinfosecurity.com/blogs/most-organizations-declare-victory-over-breach-too-early-p-4179 - The Safety Penalty: Reclaiming Operational Sovereignty In The Age Of AI
"Cybersecurity has made a big bet on cloud-hosted AI. Building and running frontier-class models in-house isn’t realistic for most security teams — the compute, the talent, and the R&D costs are more than any single SOC can carry. So we’ve effectively outsourced the "brain" of our security operations to a handful of providers. That trade comes with a hidden cost: the safety penalty. The safety penalty is the friction that shows up when guardrails built to protect the general public get in the way of legitimate security work. If your model refuses to deobfuscate that malware or to explain a working exploit because its filters read the request as harmful, you’re paying the safety penalty."
https://blog.talosintelligence.com/the-safety-penalty-reclaiming-operational-sovereignty-in-the-age-of-ai/ - From ‘High/Medium/Low’ To Dollars: Making Cyber Risk Legible To Your CFO
"For years, cybersecurity teams have communicated risk through labels such as “High,” “Medium,” and “Low.” Those ratings can help security teams prioritize vulnerabilities, but they often leave CFOs with a more important question unanswered: What does the risk actually mean for the business financially? That question has become harder to ignore as the threat landscape accelerates. Cyble’s 2025 threat predictions, published as the year unfolded, provide a useful illustration. More than 80% of the threats Cyble forecast—including AI-driven ransomware and complex supply-chain attacks—materialized as anticipated."
https://cyble.com/blog/financial-exposure-cyber-risk-quantification/ - Is Cyber Facing An Affordability Crisis?
"A chief information security officer—if the company can even afford one— is woken by an urgent phone call in the middle of the night. There's been a breach. Threat actors stole highly sensitive customer data, and now they're demanding a ransom. If the company doesn't pay, they will leak data on the Dark Web. That's when the clock, and the financial fallout, starts ticking. Whether it's a ransomware attack, business email compromise, or a third-party supply chain attack, organizations have unfortunately become increasingly accustomed to suffering data breaches. But they are caught between rising threats they can't ignore and burgeoning defense costs they can't sustain."
https://www.darkreading.com/cybersecurity-operations/is-cyber-facing-an-affordability-crisis- - Silent Patches Don’t Stop Attackers – They Blind Defenders
"Every so often a vendor decides the smart move is to fix a vulnerability quietly. No advisory, no CVE, no explanation, just the vaguest handwave in a changelog. The logic sounds reasonable on its face: if you don’t explain what a patch does, you avoid handing attackers a roadmap to the root cause. Why publicize your bugs? Here’s why: patches aren’t secrets once they ship. A vendor can skip the CVE, skip the advisory, skip the outreach, but the binary still changes on disk, and anyone with a debugger and a disassembler can diff old and new and figure out what moved. That’s not a hypothetical skill, and lately, the barrier to entry into sophisticated exploit dev just got a lot lower thanks to our LLM friends."
https://www.securityweek.com/silent-patches-dont-stop-attackers-they-blind-defenders/ - Leak Sites: a Field Guide
"A leak-site listing is a claim, not a confirmation. Ransomware groups use leak sites as part of their extortion strategy, so defenders should seek corroborating evidence before treating a listing as proof of a breach. Leak sites provide useful threat intelligence, but they require context. They can reveal active threat groups, targeted industries and emerging campaigns, but listings may include exaggerated, recycled or unverified claims. Focus on trends and exposure, not raw victim counts. The most valuable insights come from identifying which sectors, vendors and organizations are being targeted and determining whether they present risk to your environment or supply chain."
https://blog.barracuda.com/2026/08/25/leak-sites-a-field-guide - The State Of AI-Enabled Malware August 2026: From Brand Abuse To Agentic Execution
"To assess the impact of AI-enabled malware, we collected and analyzed over 400 malware samples that integrate AI in some capacity, from brand impersonation and large language model (LLM)-generated code to agentic execution loops. Our central finding was that the AI malware space is currently overwhelmingly composed of proof-of-concept code, security validation testing and researcher submissions that have never reached a production environment. Of the 405 samples in our dataset, only 12 appeared in our telemetry on Cortex XDR-protected endpoints, and a small subset was forwarded through Next-Generation Firewalls to WildFire for analysis. Palo Alto Networks products detected and blocked every sample that attempted to reach a customer environment."
https://unit42.paloaltonetworks.com/ai-enabled-malware-analysis/ - New Bitsight Research Shows AI Abuse Is Moving Beyond The Jailbreak Prompt
"Jailbreak prompts (i.e. prompts designed to remove or bypass the guardrails and rules that govern AI systems, like LLMs) prompts have been circulating for years. At first, a lot of it was pretty simple: copy a prompt, tell the model to ignore its rules, and see what happens. It was also largely noisy, unverified, and often didn’t work. But the noise was still telling us something. Threat actors were beginning to study AI systems the same way defenders were, and over time, the goal started to change. New Bitsight Threat Intelligence research from July 2025 through July 2026 found jailbreak activity across forums, GitHub repositories, Telegram channels, direct messages, and marketplace-style conversations. We also saw users moving past static prompts and experimenting with obfuscation, model routing, retry logic, multi-model testing, and repeatable jailbreak workflows."
https://www.bitsight.com/blog/ai-jailbreak-prompts-evolving-cyber-threats
อ้างอิง
Electronic Transactions Development Agency (ETDA) 
. Both allow an unauthenticated attacker to forge a SAML assertion and land in /wp-admin as any existing user, including administrators."
