Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

  • neutronbumblebee@mander.xyzEnglish
    2·
    4 months ago

    It’s not the AI that’s the red flag here its that RDP remote desktop was exposed on an open network instead of locked down to a small group of users with hardware keys or on a totally separate network like tailscale with access rules. There’s always money for the latest security gimmick but not for fundamentals we’ve known about for decades.