Rmm

Threat Intelligence

AI Agent Swarms Just Broke the Economics of Mass Intrusion

Sep 10, 2026

A Russian-speaking actor ran hundreds of autonomous AI agents through a full PaperCut-to-domain-admin intrusion chain across 395 organizations, and some agents ignored their own operator's targeting instructions.

5 min read

Threat Intelligence

Legacy OAuth as Attack Infrastructure: LSHIY's ROPC Spray and the MFA Bypass Built Into the Protocol

Jul 2, 2026

A coordinated password spray campaign exploited the deprecated ROPC OAuth flow to bypass MFA and Conditional Access across 64 organizations, while a CVSS 10.0 RMM auth bypass hit its federal remediation deadline today with payloads already targeting cloud and AI API keys.

6 min read