importantSYS.SOURCE: The Hacker News• 2026-09-09T19:53:55+05:30

Replayable AI Tokens from Infostealer Logs Bypass MFA Protections

#ai security #api keys #mfa bypass

Cybercriminals are exploiting stolen AI session tokens and API keys from infostealer logs to bypass MFA and access services like Google, Anthropic, and OpenAI. The breach highlights risks of session replay attacks, LLMjacking, and the proliferation of stolen credentials in underground markets.

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others.

Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API

Read original article

*** END OF TRANSMISSION ***

> ANTHROPIC RESEARCHER RESIGNS OVER CONCERNS ABOUT SELF-IMPROVING AI RISKS > SHIPT INTRODUCES AI-POWERED SHOPPING ASSISTANT TO ENHANCE USER EXPERIENCE > UBER INVESTS $10 MILLION IN INDIAN FLEET OPERATOR CARRUM AT $168 MILLION VALUATION > REPLAYABLE AI TOKENS FROM INFOSTEALER LOGS BYPASS MFA PROTECTIONS > DECLINE IN AI SPENDING PER EMPLOYEE AT TOP FIRMS IN AUGUST: SEASONAL LULL OR STRATEGIC CONCERN?> ANCIENT GREEK WATER CLOCK: PIONEERING TIMEKEEPING DEVICE WITH EXCEPTIONAL LONGEVITY > THE INEFFECTIVENESS OF REACTIVE SECURITY STRATEGIES IN MODERN CYBERSECURITY > ECONOMIC IMPACTS OF AI DEVELOPMENT: SCENARIOS AND PROJECTIONS > TAILWIND LABS INTEGRATES WITH SHOPIFY FOR LONG-TERM FRAMEWORK DEVELOPMENT > BIPARTISAN LAWMAKERS URGE U.S. TO SANCTION HACK-FOR-HIRE FIRMS OVER CYBERATTACKS AND CENSORSHIP> ANTHROPIC RESEARCHER RESIGNS OVER CONCERNS ABOUT SELF-IMPROVING AI RISKS > SHIPT INTRODUCES AI-POWERED SHOPPING ASSISTANT TO ENHANCE USER EXPERIENCE > UBER INVESTS $10 MILLION IN INDIAN FLEET OPERATOR CARRUM AT $168 MILLION VALUATION > REPLAYABLE AI TOKENS FROM INFOSTEALER LOGS BYPASS MFA PROTECTIONS > DECLINE IN AI SPENDING PER EMPLOYEE AT TOP FIRMS IN AUGUST: SEASONAL LULL OR STRATEGIC CONCERN?> ANCIENT GREEK WATER CLOCK: PIONEERING TIMEKEEPING DEVICE WITH EXCEPTIONAL LONGEVITY > THE INEFFECTIVENESS OF REACTIVE SECURITY STRATEGIES IN MODERN CYBERSECURITY > ECONOMIC IMPACTS OF AI DEVELOPMENT: SCENARIOS AND PROJECTIONS > TAILWIND LABS INTEGRATES WITH SHOPIFY FOR LONG-TERM FRAMEWORK DEVELOPMENT > BIPARTISAN LAWMAKERS URGE U.S. TO SANCTION HACK-FOR-HIRE FIRMS OVER CYBERATTACKS AND CENSORSHIP