The Exploit Post

Sign in Subscribe

Red Dog Security

Kaspersky Lab Studies Hack Groups Attacking Russia

Kaspersky Lab Studies Hack Groups Attacking Russia

Kaspersky Lab specialists have conducted a technical analysis of the activity of 14 hacker groups that are actively targeting organizations in Russia, Belarus, and several other countries. Among them are hacktivist groups that appeared on the Russian threat landscape after 2022 and publicly identified themselves as “pro-Ukrainian.” Three Clusters of

Salesloft Temporarily Disables Drift Following Mass Data Theft

Salesloft Temporarily Disables Drift Following Mass Data Theft

Salesloft has announced that it will temporarily disable its AI chatbot Drift starting September 5, 2025, after a large-scale supply chain attack resulted in the mass theft of authentication tokens. The Attack Last week it was revealed that hackers had compromised the Salesloft sales automation platform and stole OAuth and

Hacker Attack Disrupts Operations at Bridgestone

Hacker Attack Disrupts Operations at Bridgestone

Japanese corporation Bridgestone—one of the world’s largest tire manufacturers—has reported a cyberattack that disrupted operations at several of its manufacturing plants in North America. Scope of the Attack The incident affected Bridgestone Americas (BSA), the company’s North American subsidiary. BSA operates 50 manufacturing plants with more

Apitor Technology Toys Transmitted Children's Geolocation Data to China

Apitor Technology Toys Transmitted Children's Geolocation Data to China

The U.S. Department of Justice (DOJ) has filed a lawsuit against toy manufacturer Apitor Technology, alleging that the company allowed a third party in China to collect children’s geolocation data without their knowledge or parental consent. Alleged COPPA Violations The lawsuit, filed by the DOJ after a referral

August Windows Updates May Hinder Application Installation

August Windows Updates May Hinder Application Installation

Microsoft has reported that the August 2025 Windows security updates may trigger unexpected User Account Control (UAC) prompts and cause issues with application installations. The bug affects users without administrator rights across all supported versions of Windows. Root Cause: Security Fix in Windows Installer The issue stems from a patch

Hackers Use AI Tool HexStrike AI to Exploit Fresh Vulnerabilities

Hackers Use AI Tool HexStrike AI to Exploit Fresh Vulnerabilities

Analysts at Check Point have warned that threat actors are leveraging a new AI framework called HexStrike AI—originally designed for offensive cybersecurity—to exploit fresh n-day vulnerabilities in real-world attacks. Activity on the Darknet Researchers observed discussions related to HexStrike AI on darknet forums, where hackers described using the

Grok is Being Exploited to Spread Malicious Links on X

Grok is Being Exploited to Spread Malicious Links on X

Analysts at Guardio Labs have discovered that threat actors are exploiting the Grok AI assistant—integrated into the social network X—to bypass link placement restrictions designed to block malicious advertising. How the Attack Works According to researchers, advertisers often post questionable videos containing adult material but omit direct links