June 26, 2026
Malware Weaponizes Prompt Injection to Sabotage AI Analysis as Gamaredon Retools Against Ukraine
Gaslight, a Rust-based macOS stealer, is the first malware documented to embed prompt-injection payloads designed to sabotage AI-assisted malware analysis. ESET published a detailed breakdown of Gamaredon's 2025 arsenal, revealing six new PowerShell downloaders and extensive infrastructure laundering targeting Ukrainian government and military entities. Multiple critical vulnerabilities are being actively exploited, including CVE-2025-52465 in GeoServer for credential theft and CVE-2026-8461 in FFmpeg for remote code execution. curl patched a 24-year-old credential-leak vulnerability (CVE-2026-9079) alongside four additional flaws affecting SSH, STARTTLS, and proxy authentication.