Vendor
high
advisory
Black October: Agentic Attacks and LLMJacking on AI Developer Platforms
3 TTPs 4 IOCsA coordinated wave of attacks against at least nine AI developer platforms has enabled mass LLMJacking, where stolen API keys are abused for large-scale inference traffic and resold via illicit markets.
Railway +9
credential-access
cloud
account-compromise
llmjacking
cloud-security
supply-chain-attack
ai-security
3t
4i
updated
high
advisory
EvilTokens PhaaS Platform Leverages AI for Device Code Phishing Attacks
2 rules 2 TTPs 2 IOCsThe EvilTokens phishing-as-a-service (PhaaS) platform sold on Telegram is capable of launching device code phishing attacks at scale, leveraging AI to generate convincing and personalized lures, enabling aspiring cybercriminals to bypass traditional security measures, including MFA.
Microsoft 365 +6
phishing
device code phishing
AI
Telegram
2r
2t
2i