https://blog.dansec.red/actors/kairos/Recent content in Kairos on DanSec DailyHugoen-gbSun, 05 Jul 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-07-05-cybersecurity-news/Sun, 05 Jul 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-07-05-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>A U.S. government entity paid approximately $1 million to the Kairos extortion group to prevent the public release of stolen files. The incident details were revealed via a leaked negotiation chat and case study<sup class="citation"><a href="https://thehackernews.com/2026/07/us-government-entity-paid-kairos-group.html" title="U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case - thehackernews.com" target="_blank" rel="noopener">[1]</a></sup>.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>Apple’s Hide My Email service was found to have a flaw that allows the exposure of users’ real email addresses, undermining the intended privacy protections<sup class="citation"><a href="https://www.wired.com/story/security-roundup-apples-hide-my-email-service-fails-to-hide-your-email/" title="Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email - wired.com" target="_blank" rel="noopener">[4]</a></sup>.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>North Korean-linked actors associated with the Contagious Interview campaign published 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome, expanding their supply chain attack capabilities<sup class="citation"><a href="https://thehackernews.com/2026/07/north-korean-hackers-publish-108.html" title="North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign - thehackernews.com" target="_blank" rel="noopener">[2]</a></sup>.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>The JadePuffer ransomware operation was identified as the first known case where a large language model (LLM) agent was used to fully automate a ransomware attack, demonstrating the increasing use of AI in cybercrime<sup class="citation"><a href="https://www.bleepingcomputer.com/news/security/jadepuffer-ransomware-used-ai-agent-to-automate-entire-attack/" title="JadePuffer ransomware used AI agent to automate entire attack - bleepingcomputer.com" target="_blank" rel="noopener">[3]</a></sup>.</li> </ul> <hr> <h3 id="sources">Sources</h3> <ol class="sources"> <li id="src-1"><a href="https://thehackernews.com/2026/07/us-government-entity-paid-kairos-group.html" title="U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case - thehackernews.com" target="_blank" rel="noopener">U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case</a> <span class="source-host">- thehackernews.com</span></li> <li id="src-4"><a href="https://www.wired.com/story/security-roundup-apples-hide-my-email-service-fails-to-hide-your-email/" title="Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email - wired.com" target="_blank" rel="noopener">Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email</a> <span class="source-host">- wired.com</span></li> <li id="src-2"><a href="https://thehackernews.com/2026/07/north-korean-hackers-publish-108.html" title="North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign - thehackernews.com" target="_blank" rel="noopener">North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign</a> <span class="source-host">- thehackernews.com</span></li> <li id="src-3"><a href="https://www.bleepingcomputer.com/news/security/jadepuffer-ransomware-used-ai-agent-to-automate-entire-attack/" title="JadePuffer ransomware used AI agent to automate entire attack - bleepingcomputer.com" target="_blank" rel="noopener">JadePuffer ransomware used AI agent to automate entire attack</a> <span class="source-host">- bleepingcomputer.com</span></li> </ol>