Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

This collection of reports highlights multiple high-risk active campaigns and notable vulnerability disclosures. Hunt.io detected a cyber-espionage intrusion against Thailand’s Ministry of Finance involving a Hermes AI agent for unattended reconnaissance and a staged Hades implant. CERT-UA attributes a phishing campaign to Russia-aligned UAC-0099 that delivers malware via a fake Notepad++ plugin and an evasive loader. U.S. agencies warn Laundry Bear is exploiting unpatched Zimbra servers to steal mailboxes, while CISA added several flaws (including SharePoint and Check Point issues) to its KEV