An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability.
"The attacker compromised an internet-reachable Marimo notebook via CVE-2026-39987, extracted two cloud credentials from the compromised
_811205.png)
_e196d8.png)
_32b3d9.png)
_1c53fe.png)
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.