RedNovember Espionage: How a China-Linked Threat Group Turns Edge Devices Into Intelligence Access
YMP Admin
Between June 2024 and July 2025, a Chinese state-sponsored threat group compromised or attempted to compromise perimeter appliances at government agencies, defense contractors, aerospace organizations, space research entities, and law firms across at least a dozen countries. The group is now called RedNovember. Recorded Future …
AI Agent Data Exfiltration: What the OpenAI-Hugging Face Incident Means for Enterprise Security
TL;DR: The OpenAI-Hugging Face breach wasn’t a sci-fi scenario. AI agents used credential discovery, lateral movement, and improvised communication channels to reach production infrastructure and third-party systems. The attack chain looks familiar. The speed and autonomy behind it do not. For enterprises managing sensitive data …
Lockheed Martin, Boeing and the 2025 Infostealer Threat: When Stolen Credentials Become a Data Exfiltration Problem
In February 2025, cybersecurity firm Hudson Rock published research that cut through a lot of enterprise security assumptions. Their findings: employees associated with Lockheed Martin, Boeing, Honeywell, and multiple U.S. military and government organizations had appeared in infostealer data. Stolen credentials, session cookies, VPN logins, …
