Anthropic's Frontier Red Team says small open-weight models may be months from copying themselves across cheap IoT devices without a data center. The one full-cycle success, by GLM-5.2, came on eight emulated devices with the hacking step kept trivial.
Perspective Coverage
6 publishers
- Builder
- Builder 19%
- Operator
- Operator 70%
- Investor
- Investor 11%
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence62
Integrity Tech loses seven domains tied to its Microscan and FishHub tools
DOJ and FBI seized seven domains tied to Integrity Tech's Microscan and FishHub tools, the second action against the Flax Typhoon contractor. The company still had live scanning and phishing infrastructure to seize after the September 2024 botnet takedown.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence55
buildOne report1 publisher After the Flax Typhoon domain seizure, operators are left to hunt the group's tradecraft
FBI and Justice Department investigators seized seven domains that China-linked Flax Typhoon used to scan and in some cases infiltrate critical infrastructure. The risk remains, and with no patch to install, exposed operators have to hunt the group's tradecraft themselves.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence45
Integrity Technology Group, a government-linked Chinese firm, enables China-linked hackers to breach US and foreign networks, ten agencies said. The advisory treats the firm and its crews as one set of actors, so a single hunt can span sectors.
Perspective Coverage
14 publishers
- Builder
- Builder 14%
- Operator
- Operator 72%
- Investor
- Investor 14%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+12
- Incentives60
- Confidence74
Fortinet says the Mirai-derived botnet bolts a SOCKS5 relay onto compromised routers, cameras and Confluence hosts. Sellable proxy capacity changes what you hunt for.
Perspective Coverage
5 publishers
- Builder
- Builder 25%
- Operator
- Operator 63%
- Investor
- Investor 12%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives30
- Confidence65
buildOne report1 publisher Three undisclosed cloud hosts fielded 3,480 probes in 45 minutes
A developer rented boxes in Frankfurt, New York and Singapore, told nobody the addresses, and counted the knocks. One host on Korea Telecom's network sent nearly half the packets, so the background rate only appears once you subtract it.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives18
- Confidence55
buildOne report1 publisher A honeypot that resolves ${SERVER_IP} across connections recovered 14 of 15 real C2 URLs
A Go decoy on port 22 logged 3,888 login attempts from 666 addresses in 22 hours, and the part worth copying is the resolver that turns a loader's URL template into an address you can actually block.
Reality
- Evidence38
- Adoption10
- Hype gap+14
- Incentives40
- Confidence45
Raptor Train burns through roughly 3,500 consumer devices a day to hold 60,000 online
Black Lotus Labs assesses the botnet as Chinese state work under Flax Typhoon, assembled from SOHO routers, NVRs, NAS boxes and IP cameras whose 17-day average lifespan makes the infrastructure disposable by design.
Publishers:lumen.com
Reality
- Evidence58
- Adoption62
- Hype gap+15
- Incentives68
- Confidence57
CISA orders Ray patched as RondoDox folds cluster software into a 174-exploit arsenal
A code injection flaw in Ray is now on CISA's mandatory fix list after BitSight saw a Mirai-derived botnet exploiting it. Compute clusters are being swept with the same traffic as routers.
Reality
- Evidence48
- Adoption55
- Hype gap+22
- Incentives52
- Confidence52
buildOne report1 publisher One Mirai variant now proxies, sniffs and spreads: the appliance layer is a pivot, not DDoS fodder
FortiGuard Labs says Evooo1Bot packs SOCKS5 relaying, credential sniffing, SSH spreading and 16 flood modes into one binary across 12 CPU architectures. The tunnel matters more than the flood.
Reality
- Evidence48
- Adoption
- Not scored
- Hype gap+18
- Incentives58
- Confidence42