CISA Advisories

AI-Powered Hackers Gut Chainalysis 🤖 + Zero-Click Phone Spyware 📱

Two stories today show where attacks are heading: AI-assisted hackers draining an entire company's user database, and spy-grade phone exploits that need zero clicks from you. If you run a business or carry a smartphone, both apply to you.

⛓️ Chainalysis Breached by "Agentic" AI Attackers

Chainalysis, the blockchain analytics firm that governments and banks rely on to track crypto crime, says data for all of its users may have been stolen. The attacker reportedly used "offensive agentic techniques," meaning AI agents that can carry out parts of a hack on their own and at speed. Stolen data includes names, usernames, password hashes, and live login tokens. Those tokens matter most, because they can let an attacker act as a user without ever needing a password. Chainalysis also took some services offline, including its transaction-monitoring tool. The takeaway for every business: AI is making attacks faster and cheaper, so rotate credentials quickly after any vendor breach and make sure your session tokens expire.

Read more →

📱 Zero-Click Spyware Hits Outdated iPhones and Androids

Hackers likely tied to Russia's foreign intelligence service broke into websites, plus a Ukrainian analytics service, and used them to slip malicious code into mobile web traffic. Visitors with outdated iOS or Android devices got infected without clicking or downloading anything. The spyware went after browser cookies, Wi-Fi passwords, and full device data. Targets included sites linked to US and UK diplomatic circles and Ukraine, but these techniques tend to spread to wider use over time. The fix is simple and free: turn on automatic updates and install them right away.

Read more →

Stay ahead of threats with GOCO Security at gocosecurity.com.

Comments