Exploitation Workflows

Cisco Talos: Chinese-Speaking Group Uses AI and New 'SPECTRE' Tooling to Blind Endpoint Defenses

Talos says the actor combines agentic AI automation with a cross-platform backdoor and a kernel rootkit to neutralize major EDR products and scale financially motivated attacks.