Measuring Human Cryptanalysis Effort Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: > Abstract: …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can …
Backdooring Open-Weight AI Models This is a problem: > Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated …
ai-security
EN
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
** Ravie Lakshmanan ** Oct 16, 2026 Zero-Day / Vulnerability The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw …
ai-security
EN
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
** Ravie Lakshmanan ** Oct 16, 2026 Artificial Intelligence / Web Security OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, …
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman’s fast, …
ai-security
EN
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct …
** Swati Khandelwal ** Oct 16, 2026 Vulnerability / OpenBSD A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a …
ai-security
EN
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy …
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX . The package, named " imgdecode …
ai-security
EN
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud …
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory, and the researcher who reported it turned that into code execution on the …
ai-security
EN
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the …
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme …
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced …
ai-security
EN
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server , to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub , with …
ai-security
EN
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday. …
October 2026 Microsoft Patch Tuesday Published 2026-10-13. Last Updated 2026-10-13 19:25:52 UTC by Johannes Ullrich (Version: 1) 1 comment(s) Microsoft today released patches for 1,417 …
ai-security
EN
ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th)
ISC Stormcast For Wednesday, October 14th, 2026 <https://isc.sans.edu/podcastdetail/10136>
Artificial Intelligence AI Turns Familiar Cyberattacks Into a Race Against Time IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses. By Kevin Townsend | …
Malware & Threats XWorm RAT Evolves Into Surveillance Platform Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser …
Artificial Intelligence Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread …
Data Breaches Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring …
Vulnerabilities Google Partially Reverses Chrome Bug Bounty Cuts Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. By Eduard Kovacs | October 13, 2026 …
Vulnerabilities Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution …