In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

This roundup underscores how modern attack surfaces span operational technology (OT), malware infrastructure, and AI-assisted development pipelines simultaneously. The ICS-Sniper proof-of-concept demonstrates that cloud-hosted SCADA systems introduce internet-exposed attack vectors into traditionally air-gapped industrial environments, a critical misconfiguration risk. The unauthenticated RCE flaw in XWorm's C2 panel reveals that even threat actors' own infrastructure can be compromised through poor secure development practices. Most notably, Bank of America's need to hire 1,000 contractors to remediate AI-surfaced software flaws signals that AI tooling is accelerating vulnerability discovery at a scale that organizations are not yet equipped to manage through standard patch and vulnerability workflows.