Corey Thuen is a hacker with a hacker mindset that is focused on the right way to do wrong things to get the right result. Corey Thuen is the founder and CEO of Gravwell , a firm with a slight …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who …
Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full …
Training AIs to Solve CAPTCHAs Interesting research : > Abstract > : Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach …
Possible new Cellebrite iPhone Radio Zero-Day Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: > Cellebrite calls it Advanced Unlocks (AU from here on), not …
Workshop on Economics and Information Security (WEIS) Archive There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice …
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the …
New Serious PHP Vulnerabilities Released and Patched PHP maintainers have released fixes for two critical vulnerabilities: > PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities …
** Ravie Lakshmanan ** Oct 22, 2026 Data Privacy / Regulatory Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit …
ai-security
EN
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
** Ravie Lakshmanan ** Oct 22, 2026 Cybercrime / Law Enforcement INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more …
ai-security
EN
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel’s built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro’s Zero Day Initiative , with no fix …
ai-security
EN
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
** Ravie Lakshmanan ** Oct 22, 2026 Hacking News / Cybersecurity News This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs , compromised …
** The Hacker News ** Oct 22, 2026 Enterprise Security / Artificial Intelligence Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database …
ai-security
EN
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra , an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday . The decision came five days after a researcher reported …
** Swati Khandelwal ** Oct 22, 2026 Vulnerability / Enterprise Security Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management …
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg). In a nutshell: the VBA code is stored inside an OLE file, that is embedded inside the DWG file. You can do a …
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program] Crypto mining malware has been active and spreading across the internet for quite some time now. …
ai-security
EN
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
ISC Stormcast For Thursday, October 15th, 2026 <https://isc.sans.edu/podcastdetail/10138>
I believe the cybersecurity industry may be approaching AI security the wrong way. AI agents are becoming more powerful every day. Systems like ChatGPT, Claude, and Grok can write and execute code, …
ai-security
EN
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
ISC Stormcast For Friday, October 16th, 2026 <https://isc.sans.edu/podcastdetail/10140>
The United Kingdom has issued economic sanctions against Cryptomus , a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, …
I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This code integrity problem could be …
The Future of AI Cryptanalysis Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and …
Cyberattack on Connected Fridges in France Another IoT cyberattack , this one in France: > Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing …
Upcoming Speaking Engagements This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, …