Kimsuky Builds Offline AI Stack to Boost Phishing and Malware Operations
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…
Tag: Semantic Kernel
Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…
Semantic Kernel: Microsoft’s AI Orchestration SDK
Semantic Kernel is Microsoft's open-source SDK for integrating AI into applications. It was found on Kimsuky's infrastructure, likely for developing AI-powered tools.
CVE-2026-26030: Microsoft Semantic Kernel Additional Command Injection Vulnerability
Another command injection vulnerability in Microsoft Semantic Kernel related to insecure shell command handling.
CVE-2026-25592: Microsoft Semantic Kernel Command Injection Vulnerability
A vulnerability in Microsoft's Semantic Kernel agent framework where model output reaching a shell can lead to command injection. Patched by Microsoft.