Chinese LLMs Broaden the Gap Between Attackers & Defenders

This Dark Reading feed highlights an accelerating and diversified threat landscape driven by AI/LLM abuse, active zero-day exploitation, and targeted ransomware/credential-theft campaigns. Notable items: FortiBleed footholds in thousands of Fortinet devices being monetized by Inc and Lynx ransomware gangs (with correlated Nextcloud zero-day activity); the 'Djinn' infostealer exploiting SimpleHelp authentication bypass (CVE-2026-48558) to steal cloud and AI credentials; rapid weaponization of Cisco CUCM SSRF-to-root flaws and prior exploitation of Cisco SD‑WAN; and widespread AI-specific risks—