Record · corpus.blog/posts/01a0e50f-6b14-70d7-bf4c-a65991174764

Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity

news.risky.biz · published 23 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at news.risky.biz Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 88
Words captured: 3,322

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://specterops.io/

specterops.io

https://www.team-cymru.com/post/llm-gateway-frontier-model-abuse

team-cymru.com

https://infrawatch.com/blog/73000-servers-selling-western-frontier-ai-into-china-transfer-stations

infrawatch.com

https://united24media.com/war-in-ukraine/ukrainian-hackers-raid-russias-naval-files-walk-away-with-secrets-from-70-projects-22707

united24media.com

https://t.me/ukrainian_militant/41104?embed=1&mode=tme&single=1

t.me

https://www.emeryreddy.com/blog/data-breach/bigcommerce-app-breach

emeryreddy.com

https://www.masterofmalt.com/sorry/technical/

masterofmalt.com

https://www.lmu.de/de/newsroom/newsuebersicht/news/information-ueber-einen-datenschutzvorfall-f446c16e.html

lmu.de

https://x.com/Qrator_Radar/status/2101632546412925050

x.com

https://bsky.app/profile/eldomador.bsky.social/post/3mvxzutnqj222

bsky.app

https://therecord.media/linkedin-wins-court-order-blocking-mass-scraping

therecord.media

https://www.dataprotection.ie/en/news-media/latest-news/data-protection-commission-fines-google-eu403-million-following-inquiry-googles-processing-location

dataprotection.ie

https://bsky.app/profile/did:plc:q6eyedxsrca72fz4xjifsmws/post/3mvzkvqoa2k2o?ref_src=embed

bsky.app

https://bsky.app/profile/did:plc:q6eyedxsrca72fz4xjifsmws?ref_src=embed

bsky.app

https://www.theverge.com/ai-artificial-intelligence/996470/ai-data-center-e-waste-ban

theverge.com

https://pulse.internetsociety.org/en/blog/2026/09/tracking-south-east-asias-internet-concentration-problem/

pulse.internetsociety.org

https://learn.microsoft.com/en-us/windows-insider/release-notes/experimental-26-h1/preview-build-28120-3032

learn.microsoft.com

https://support.apple.com/en-us/127906

support.apple.com

https://www.nist.gov/news-events/news/2026/09/nist-awards-more-17-million-support-cybersecurity-workforce-development

nist.gov

https://www.reuters.com/business/finance/us-treasurys-bessent-chinas-he-launch-talks-ai-trade-critical-minerals-2026-09-20/

reuters.com

https://walkinshaw.house.gov/news/documentsingle.aspx?DocumentID=838

walkinshaw.house.gov

https://www.canada.ca/en/department-national-defence/maple-leaf/defence/2026/09/strategy-action-canada-japan-strengthen-defence-ties-indo-pacific.html

canada.ca

AI: EU Member States plan “digital expropriation” of Europeans in the interest of AI companies Read at the source ↗

noyb.eu

https://www.abc.net.au/news/2026-09-15/ai-companies-train-on-creator-work-documents-reveal/107154688?

abc.net.au

Meta’s Copyright System Is Being Weaponized Against Albanian Protesters Read at the source ↗

wired.com

https://www.reprouncensored.org/research-overview/meta-albania-eu

reprouncensored.org

https://www.wojsko-polskie.pl/woc/articles/aktualnosci-w/wojska-obrony-cyberprzestrzeni-i-ministerstwo-sprawiedliwosci-beda-wspolpracowac-na-rzecz-cyberbezpieczenstwa-i-rozwoju-programu-cyberlegion/

wojsko-polskie.pl

https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/

microsoft.com

https://blogs.microsoft.com/on-the-issues/2026/09/22/disrupting-eviltokens-the-ai-chatbot-built-for-cybercrime/

blogs.microsoft.com

https://www.coinbase.com/blog/taking-down-evil-tokens

coinbase.com

https://spycloud.com/blog/disrupting-the-eviltokens-phaas-platform/

spycloud.com

https://www.trmlabs.com/resources/blog/trm-labs-supports-microsofts-disruption-of-eviltokens-an-ai-powered-cybercrime-service

trmlabs.com

https://www.justice.gov/opa/pr/extradited-nigerian-national-pleads-guilty-money-laundering-connection-sextortion-and

justice.gov

https://safeonweb.be/nl/actueel/pas-op-voor-frauduleuze-telefoontjes-waarin-je-wordt-gevraagd-een-app-te-installeren-en-je

safeonweb.be

https://asec.ahnlab.com/en/95516/

asec.ahnlab.com

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation Read at the source ↗

greynoise.io

https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/

acronis.com

https://spycloud.com/blog/water-utility-identity-exposure/

spycloud.com

North Korea’s Hangro Revisited Read at the source ↗

blog.synapticsystems.de

https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-warden-a978d5ae1147

g0njxa.medium.com

https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/

cert.pl

Graphalgo campaign spreads to Terraform providers and Go Modules Read at the source ↗

aikido.dev

https://www.reversinglabs.com/blog/malicious-npm-campaign-twilio

reversinglabs.com

https://slowmist.medium.com/threat-intelligence-polinrider-poisons-nova-using-on-chain-transactions-as-a-c2-manager-5357a9d0222e

slowmist.medium.com

When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts Read at the source ↗

blog.cloudflare.com

https://securelist.com/tr/payload-ransomware-via-group-policy/121335/

securelist.com

https://www.zscaler.com/blogs/security-research/vidar-adds-virtual-machine-and-custom-stream-ciphers-string-obfuscation

zscaler.com

https://www.securonix.com/blog/task-stomp-powershell-backdoor-document-theft-remote-access

securonix.com

The Closed Quorum: Inside the first reported autonomous AI C2 implant Read at the source ↗

blog.talosintelligence.com

https://www.enisa.europa.eu/publications/enisa-threat-landscape-2026

enisa.europa.eu

https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/

volexity.com

https://socradar.io/blog/operation-talked-russia-ukraine-defense-industry/

socradar.io

https://dfrlab.org/2026/09/17/storm-1516-operation-targets-the-baltic-states/

dfrlab.org

https://labs.infoguard.ch/posts/iranopasmigitim_part_one/

labs.infoguard.ch

https://www.atlassian.com/blog/how-we-build/disrupting-contagious-interview

atlassian.com

https://helpx.adobe.com/security.html

helpx.adobe.com

https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183

arista.com

https://confluence.atlassian.com/security/security-bulletin-september-15-2026-1822852209.html

confluence.atlassian.com

https://supportannouncement.us.dlink.com/

supportannouncement.us.dlink.com

https://www.dell.com/support/security/en-ca

dell.com

https://www.gigabyte.com/security/security-advisory

gigabyte.com

https://www.oracle.com/security-alerts/cspusep2026.html

oracle.com

https://ubuntu.com/security/notices

ubuntu.com

https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/

arstechnica.com

Security Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616 Read at the source ↗

blog.checkpoint.com

https://support.checkpoint.com/results/sk/sk1000171/

support.checkpoint.com

https://support.checkpoint.com/results/sk/sk1000117

support.checkpoint.com

https://my.f5.com/manage/s/article/K000162605?mkt_tok=NjUzLVNNQy03ODMAAAGkaH9ofwJ_SRrYgVTlugDrbGmtsu1nH57-t7CLkyTTdZHlyphUFNtULl3ACEteoRszBciQ_4gjkNsWTnQqQfftwYMNCzWPXxGhUqTJ-emmdyUmrf_dqfI

my.f5.com

https://github.com/MSNightmare/BigDiskBuster

github.com

https://github.com/Wh02m1/CVE-2026-78306/blob/main/README.md

github.com

https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10516

supportannouncement.us.dlink.com

https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0

tzh00203.notion.site

https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10518

supportannouncement.us.dlink.com

https://github.com/FoundTL/D-Link-R95-BE9500i

github.com

https://bsky.app/profile/did:plc:oaxkkzgee5ot3f4mgw7w7yai/post/3mw4gc4hoyk2c?ref_src=embed

bsky.app

https://bsky.app/profile/did:plc:oaxkkzgee5ot3f4mgw7w7yai?ref_src=embed

bsky.app

https://www.databarracks.com/resources/data-health-check-2026/

databarracks.com

https://www.forescout.com/blog/what-47700-segments-reveal-about-network-segmentation/

forescout.com

https://blogs.microsoft.com/on-the-issues/2026/09/21/the-continued-state-of-global-ai-diffusion-in-2026/

blogs.microsoft.com

Introducing CAIRN: Frontier tracking for AI-integrated malware Read at the source ↗

blog.talosintelligence.com

https://github.com/Cisco-Talos/Cognitive-Artifact-Intelligence-Research-Network

github.com

https://github.com/nationwide-group-oss/cryptoptic

github.com

https://github.com/Bert-JanP/KustoHawk/

github.com

https://github.com/Bert-JanP/EntraTrace

github.com

Introducing Aikido Altar: the model that makes sovereign security intelligence possible Read at the source ↗

aikido.dev

https://huggingface.co/AikidoSec/altar-1

huggingface.co

https://www.youtube.com/playlist?list=PL0l1gbNCthd4uZuJpnJFH0FpWTrtUg8fD

youtube.com

https://www.youtube.com/playlist?list=PLXkmvDo4MfusDkunigJf3-fbubXlPaXSw

youtube.com