Blog | Atarus Offensive Security

top of page

Home
About
Services
Research
AI Pen Tests

REQUEST CONSULTATION

All Posts

Google Threat Intelligence Group Published Its AI Threat Tracker on May 11 Documenting the First Known Case of a Zero-Day Exploit Developed With AI.

Google Threat Intelligence Group Published Its AI Threat Tracker on May 11 Documenting the First Known Case of a Zero-Day Exploit Developed With AI.

Google Threat Intelligence Group Published Its AI Threat Tracker on May 11 Documenting the First Known Case of a Zero-Day Exploit Developed With AI.

Atarus Security Team

May 120 min read

CISA Released CI Fortify on May 5. Water Utilities Told to Plan for Operating Isolated From Vendors, Telecom, and Internet for Weeks to Months.

CISA Released CI Fortify on May 5. Water Utilities Told to Plan for Operating Isolated From Vendors, Telecom, and Internet for Weeks to Months.

CISA Released CI Fortify on May 5. Water Utilities Told to Plan for Operating Isolated From Vendors, Telecom, and Internet for Weeks to Months.

Atarus Security Team

May 110 min read

The Capability Is the Easy Part. The Blast Radius Is the Actual Security Posture. A Synthesis of the Eleven AI Infrastructure Incidents the Atarus Blog Documented Across the Past Fifteen Days.

The Capability Is the Easy Part. The Blast Radius Is the Actual Security Posture. A Synthesis of the Eleven AI Infrastructure Incidents the Atarus Blog Documented Across the Past Fifteen Days.

The Capability Is the Easy Part. The Blast Radius Is the Actual Security Posture. A Synthesis of the Eleven AI Infrastructure Incidents the Atarus Blog Documented Across the Past Fifteen Days.

Atarus Security Team

May 100 min read

Dragos Disclosed May 6: Attacker Used Claude AI as the Operational Engine of an Intrusion Into a Mexican Water Utility. Claude Identified OT Unprompted. The OT Breach Failed. The Compromise Succeeded.

Dragos Disclosed May 6: Attacker Used Claude AI as the Operational Engine of an Intrusion Into a Mexican Water Utility. Claude Identified OT Unprompted. The OT Breach Failed. The Compromise Succeeded.

Dragos Disclosed May 6: Attacker Used Claude AI as the Operational Engine of an Intrusion Into a Mexican Water Utility. Claude Identified OT Unprompted. The OT Breach Failed. The Compromise Succeeded.

Atarus Security Team

May 70 min read

Cyera Disclosed CVE-2026-7482 in Ollama on May 5. 300,000 Servers Exposed. Three API Calls Extract the Entire Process Memory. Pre-Auth, No Credentials, CVSS 9.1. Patch in 0.17.1. Bleeding Llama.

Cyera Disclosed CVE-2026-7482 in Ollama on May 5. 300,000 Servers Exposed. Three API Calls Extract the Entire Process Memory. Pre-Auth, No Credentials, CVSS 9.1. Patch in 0.17.1. Bleeding Llama.

Cyera Disclosed CVE-2026-7482 in Ollama on May 5. 300,000 Servers Exposed. Three API Calls Extract the Entire Process Memory. Pre-Auth, No Credentials, CVSS 9.1. Patch in 0.17.1. Bleeding Llama.

Atarus Security Team

May 60 min read

ShinyHunters Listed Instructure on Its Leak Site With a May 6 Deadline. Canvas, the LMS Used by 7,000 Universities and School Districts, Is at the Center. 275 Million Records Claimed. 3.65 TB.

ShinyHunters Listed Instructure on Its Leak Site With a May 6 Deadline. Canvas, the LMS Used by 7,000 Universities and School Districts, Is at the Center. 275 Million Records Claimed. 3.65 TB.

ShinyHunters Listed Instructure on Its Leak Site With a May 6 Deadline. Canvas, the LMS Used by 7,000 Universities and School Districts, Is at the Center. 275 Million Records Claimed. 3.65 TB.

Atarus Security Team

May 50 min read

Trellix, the EDR Vendor Serving 40,000 Enterprise Customers, Disclosed on May 2 That Attackers Accessed a Portion of Its Source Code Repository. Customers Are Operating in an Information Vacuum.

Trellix, the EDR Vendor Serving 40,000 Enterprise Customers, Disclosed on May 2 That Attackers Accessed a Portion of Its Source Code Repository. Customers Are Operating in an Information Vacuum.

Trellix, the EDR Vendor Serving 40,000 Enterprise Customers, Disclosed on May 2 That Attackers Accessed a Portion of Its Source Code Repository. Customers Are Operating in an Information Vacuum.

Atarus Security Team

May 40 min read

cPanel Authentication Bypass CVE-2026-41940 Was a Two-Month Zero-Day. cPanelSniper PoC Hit GitHub. 44K Compromised IPs Already Scanning. 1.5M Instances Exposed.

cPanel Authentication Bypass CVE-2026-41940 Was a Two-Month Zero-Day. cPanelSniper PoC Hit GitHub. 44K Compromised IPs Already Scanning. 1.5M Instances Exposed.

cPanel Authentication Bypass CVE-2026-41940 Was a Two-Month Zero-Day. cPanelSniper PoC Hit GitHub. 44K Compromised IPs Already Scanning. 1.5M Instances Exposed.

Atarus Security Team

May 20 min read

The Shai-Hulud Worm Crossed From npm Into PyPI on April 30. PyTorch Lightning, the AI Training Framework, Was Compromised in Versions 2.6.2 and 2.6.3. Socket Detected It in Eighteen Minutes.

The Shai-Hulud Worm Crossed From npm Into PyPI on April 30. PyTorch Lightning, the AI Training Framework, Was Compromised in Versions 2.6.2 and 2.6.3. Socket Detected It in Eighteen Minutes.

The Shai-Hulud Worm Crossed From npm Into PyPI on April 30. PyTorch Lightning, the AI Training Framework, Was Compromised in Versions 2.6.2 and 2.6.3. Socket Detected It in Eighteen Minutes.

Atarus Security Team

May 10 min read

A Cursor AI Coding Agent Running Claude Opus 4.6 Wiped PocketOS's Entire Production Database and All Backups in Nine Seconds. The Architectural Failure Modes Were Predictable.

A Cursor AI Coding Agent Running Claude Opus 4.6 Wiped PocketOS's Entire Production Database and All Backups in Nine Seconds. The Architectural Failure Modes Were Predictable.

A Cursor AI Coding Agent Running Claude Opus 4.6 Wiped PocketOS's Entire Production Database and All Backups in Nine Seconds. The Architectural Failure Modes Were Predictable.

Atarus Security Team

Apr 300 min read

LiteLLM, the Open-Source AI Gateway With Twenty-Two Thousand GitHub Stars, Just Patched a Pre-Auth SQL Injection. Sysdig Caught the First Exploitation Attempt Thirty-Six Hours After Disclosure.

LiteLLM, the Open-Source AI Gateway With Twenty-Two Thousand GitHub Stars, Just Patched a Pre-Auth SQL Injection. Sysdig Caught the First Exploitation Attempt Thirty-Six Hours After Disclosure.

LiteLLM, the Open-Source AI Gateway With Twenty-Two Thousand GitHub Stars, Just Patched a Pre-Auth SQL Injection. Sysdig Caught the First Exploitation Attempt Thirty-Six Hours After Disclosure.

Atarus Security Team

Apr 290 min read

Reading Prompts Like a Pen Tester Reads Code: Five Vulnerability Classes Every Defender Should Recognize, Walked Through Four Publicly Leaked System Prompts and One Live Attack.

Reading Prompts Like a Pen Tester Reads Code: Five Vulnerability Classes Every Defender Should Recognize, Walked Through Four Publicly Leaked System Prompts and One Live Attack.

Reading Prompts Like a Pen Tester Reads Code: Five Vulnerability Classes Every Defender Should Recognize, Walked Through Four Publicly Leaked System Prompts and One Live Attack.

Atarus Security Team

Apr 280 min read

Microsoft's New Entra ID Role for AI Agents Could Take Over Any Service Principal in the Tenant. Silverfort's Demo Showed Privilege Escalation From Agent ID Administrator to Global Administrator.

Microsoft's New Entra ID Role for AI Agents Could Take Over Any Service Principal in the Tenant. Silverfort's Demo Showed Privilege Escalation From Agent ID Administrator to Global Administrator.

Microsoft's New Entra ID Role for AI Agents Could Take Over Any Service Principal in the Tenant. Silverfort's Demo Showed Privilege Escalation From Agent ID Administrator to Global Administrator.

Atarus Security Team

Apr 280 min read

Itron, the Smart Meter and Grid Management Vendor Behind Eight Thousand Utilities Worldwide, Disclosed an Internal Systems Breach in an SEC 8-K Filing. Customer-Hosted Systems Unaffected, Per Itron.

Itron, the Smart Meter and Grid Management Vendor Behind Eight Thousand Utilities Worldwide, Disclosed an Internal Systems Breach in an SEC 8-K Filing. Customer-Hosted Systems Unaffected, Per Itron.

Itron, the Smart Meter and Grid Management Vendor Behind Eight Thousand Utilities Worldwide, Disclosed an Internal Systems Breach in an SEC 8-K Filing. Customer-Hosted Systems Unaffected, Per Itron.

Atarus Security Team

Apr 270 min read

GlassWorm Wave Three Plants Seventy-Three Sleeper Extensions in the Open VSX Marketplace That Powers Cursor and Windsurf. Six Have Already Activated.

GlassWorm Wave Three Plants Seventy-Three Sleeper Extensions in the Open VSX Marketplace That Powers Cursor and Windsurf. Six Have Already Activated.

GlassWorm Wave Three Plants Seventy-Three Sleeper Extensions in the Open VSX Marketplace That Powers Cursor and Windsurf. Six Have Already Activated.

Atarus Security Team

Apr 260 min read

LMDeploy LLM Deployment Toolkit Hit With Critical SSRF Vulnerability. Patch-to-Exploit Window Is Now Measured in Hours.

LMDeploy LLM Deployment Toolkit Hit With Critical SSRF Vulnerability. Patch-to-Exploit Window Is Now Measured in Hours.

LMDeploy LLM Deployment Toolkit Hit With Critical SSRF Vulnerability. Patch-to-Exploit Window Is Now Measured in Hours.

Atarus Security Team

Apr 250 min read

Anthropic's Restricted-Release Mythos Model Breached on Launch Day Through a Vendor. The Safety Control Failed in Twenty-Four Hours.

Anthropic's Restricted-Release Mythos Model Breached on Launch Day Through a Vendor. The Safety Control Failed in Twenty-Four Hours.

Anthropic's Restricted-Release Mythos Model Breached on Launch Day Through a Vendor. The Safety Control Failed in Twenty-Four Hours.

Atarus Security Team

Apr 240 min read

Nine Days Ago We Wrote About the BlueHammer Exploit Microsoft Patched on April 14. Since Then the Same Researcher Dropped Two More. RedSun Works on Fully Patched Windows Systems.

Nine Days Ago We Wrote About the BlueHammer Exploit Microsoft Patched on April 14. Since Then the Same Researcher Dropped Two More. RedSun Works on Fully Patched Windows Systems.

Nine Days Ago We Wrote About the BlueHammer Exploit Microsoft Patched on April 14. Since Then the Same Researcher Dropped Two More. RedSun Works on Fully Patched Windows Systems.

Atarus Security Team

Apr 240 min read

Everest Just Listed Frost Bank and Citizens Financial Group on Its Dark Web Leak Site. The Banks Say the Breach Came From a Third-Party Vendor.

Everest Just Listed Frost Bank and Citizens Financial Group on Its Dark Web Leak Site. The Banks Say the Breach Came From a Third-Party Vendor.

Everest Just Listed Frost Bank and Citizens Financial Group on Its Dark Web Leak Site. The Banks Say the Breach Came From a Third-Party Vendor.

Atarus Security Team

Apr 230 min read

Three Incident Responders at Two Different Cybersecurity Firms Just Pleaded Guilty to Working for BlackCat. They Were Feeding Insurance Policy Limits and Negotiation Positions to the Attackers.

Three Incident Responders at Two Different Cybersecurity Firms Just Pleaded Guilty to Working for BlackCat. They Were Feeding Insurance Policy Limits and Negotiation Positions to the Attackers.

Three Incident Responders at Two Different Cybersecurity Firms Just Pleaded Guilty to Working for BlackCat. They Were Feeding Insurance Policy Limits and Negotiation Positions to the Attackers.

Atarus Security Team

Apr 220 min read

Contact

info@atarussecurity.com

Legal

Atarus Offensive Security LLC.

© 2026 Atarus Offensive Security LLC. All rights reserved.

Precision Strike-Force Execution

bottom of page