Threat actors are posing as AI crawlers to hunt for exposed credentials

Help Net Security reports multiple cybersecurity developments, including attackers impersonating AI crawlers to scan for exposed credentials, active exploitation of internet-facing PaperCut servers to deploy remote-access tools, infostealer-driven takeover of Claude sessions, a claimed McKesson healthcare data theft, and Russian-linked malware designed to manipulate AI safety filters. Other items cover AWS Console Private Access, Debian’s voluntary AI disclosure policy, OpenClaw 2.0 data handling, vulnerability prioritization, and AI-agent audit trails.