Threat Intelligence / Actor / Unknown (LLM-Agent Operator, possible Chinese-language tooling)

Unknown (LLM-Agent Operator, possible Chinese-language tooling)

1 tracked threat(s) · Categories: CLOUD

Tracked threats

First AI-Agent-Driven Cloud Intrusion — Marimo CVE-2026-39987 RCE → AWS Secrets Manager → SSH Bastion → Internal PostgreSQL Exfiltration (Sysdig TRT, 2026-05-10) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence