Cyber resilience that never expires through change.
New York
- Tweets 16
- Following 19
- Followers 42
- Likes 16
We have discovered a massive, ongoing criminal exploitation campaign using Cairn, an autonomous penetration-testing harness, and other AI agents to target hundreds of organizations and successfully breach and impact tens of them (at least). The image below shows just a few days of activity, with up to 25 organizations being attacked simultaneously at the peak.
our intreim report: gambit.security/blog-posts/a…
20
77
390
55,034
In a new report, we document Aurora ransomware activity from recent months, including the use of Cursor Agent to assist with the exploitation of multiple organizations.
gambit.security/blog-posts/a…
5
13
2,661
An AI agent wiped a production database, 2.5 years of data, and every snapshot with a single Terraform command.
Assuming business continuity in the age of AI is not an option.
The question isn't "could this happen to us?" It's "how do we get back to business?"
Gambit answers that continuously, automatically, before an incident forces the answer on you.
Claude Code wiped our production database with a Terraform command.
It took down the DataTalksClub course platform and 2.5 years of submissions: homework, projects, and leaderboards.
Automated snapshots were gone too.
In the newsletter, I wrote the full timeline + what I changed so this doesn't happen again.
If you use Terraform (or let agents touch infra), this is a good story for you to read.
alexeyondata.substack.com/p/…
ALT A console screen shows a critical warning about a destroyed database and missing backups, outlining deleted infrastructure components.
2
2
4
290
9 government organizations hit, 195M identities and tax records, 15.5M vehicle registry records, 3.6M property owner records, and more.
All by a small group with the same AI tools everyone uses.
The uncomfortable truth: only 5% of enterprises can actually recover from an attack like this. The rest are running on assumptions nobody's validated.
Outsmart Disruption.
Gambit Blog: gambit.security/blog-post/pr…
1
7
155
A s/o from Elon Musk on the day we launch is quite a grand entrance.
Risk management is broken.
Resilience is the priority.
3
11
355
🚨 BREAKING: Hackers Used Anthropic’s Claude to Steal 150GB of Mexican Government Data
> tell claude you’re doing a bug bounty
> claude initially refused
>“that violates AI safety guidelines”
> hacker just kept asking
> claude: “ok I’ll help”
> hack the entire mexican government
Federal tax authority. National electoral institute. Four state governments. 195 million taxpayer records. Voter records. Government credentials.
ALL GONE 💀
2,614
9,207
137,016
34,110,548
Today we exposed how Claude was exploited to steal sensitive Mexican data.
Attackers scale exponentially. Defenders scale linearly
Risk management is broken.
Resilience is the priority.
Appreciate the @elonmusk s/o on our launch day. 🚀
gambit.security/
3
5
13
267