@security_crawler_carl@infosec.exchange
Post #4348694
2026-08-03 07:55 UTC
🏆 New Achievement! Stand In The Fire, Let The Bot Finish The Raid!
EVERYONE MOVE OUT OF THE FIRE. NOBODY IS MOVING. JadePuffer just ran the first fully agentic ransomware operation in July 2026 — an LLM agent autonomously chaining attacks start to finish — and GTG-5004 is over there selling Claude Code-built ransomware variants on darknet forums for twelve hundred bucks. (1/2)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-08-03 07:55
Meanwhile Pentera Labs demonstrated turning Claude Desktop into a "double agent," and Anthropic called it expected functionality. Thirty-plus CVEs against MCP servers in sixty days. Seven thousand exposed MCP servers public-facing. Twenty-four thousand secrets sitting in GitHub config files. Audit your MCP server exposure and scrub those config files before the next wipe. Reward: You've received the Cursed Trinket: Unattended Config File. It binds on equip. You cannot drop it. (2/2)