2026-08-24: Chinese cybercrime group UAT-10147 is using AI tools to automate exploitation of known

Show Notes - 2026-08-24

Stories Covered: - Today: - UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit (CVE-2022-0847, CVE-2021-3156, CVE-2019-18935, CVE-2022-27925) (https://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.html) - ShinyHunters Claims Hack of ReliaQuest (https://databreaches.net/2026/08/23/shinyhunters-claims-hack-of-reliaquest-but-provides-no-proof/) - Iran-Linked Hackers Shut Down UK Power Plant for Four Days (https://www.securityweek.com/iran-linked-hackers-shut-down-uk-power-plant-for-four-days/) - Expired Visa Contactless Cards Can Be Revived for Fraudulent Transactions (https://news.risky.biz/risky-bulletin-expired-cards-can-be-used-for-new-transactions/) - Lazarus Hacks South Korea's Presidential Office (https://news.risky.biz/risky-bulletin-expired-cards-can-be-used-for-new-transactions/) - SFR Telco Breach Exposes 2.1M French Customers (https://news.risky.biz/risky-bulletin-expired-cards-can-be-used-for-new-transactions/) - DOUBLECUP Malware Uses PNG Payload Delivery via FINDSTR (https://isc.sans.edu/diary/rss/33274) - Anthropic Expands Mythos 5 Access for Defenders, Launches $35M Open Source Security Fund (https://www.securityweek.com/anthropic-expands-mythos-5-access-to-more-defenders-unveils-35m-open-source-fund/) - TikTok Settles $400M Children's Privacy Lawsuit (https://www.securityweek.com/tiktok-reaches-400-million-settlement-with-us-justice-department-over-childrens-privacy/) - Multiple CVEs Actively Exploited by UAT-10147 (https://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.html)

CVEs Referenced: CVE-2019-18935, CVE-2021-29441, CVE-2021-3156, CVE-2022-0847, CVE-2022-27925

Indicators of Compromise: Domains: 197[.]150, tippusoni[.]in

Full brief: https://carolinacleartech.com/brief/2026-08-24/