Cybercrime Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that …
ai-security
EN
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
In environments studied for the 2026 State of Agent Security Report , roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to …
ai-security
EN
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
ISC Stormcast For Friday, October 9th, 2026 <https://isc.sans.edu/podcastdetail/10130>
ai-security
EN
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models …
Vulnerabilities Citrix Urges Immediate Patching of Critical NetScaler Vulnerability The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. By Ionut …
ai-security
EN
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Application Security Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security OSS Scanner sends unreviewed, model-generated vulnerability reports to open source …
Government US Disrupts Chinese State-Sponsored Hacking Tools Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. By Ionut Arghire | October …
Vulnerabilities Unpatched AhsayCBS Vulnerabilities Exploited in the Wild The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. By Ionut …
Malware & Threats Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost …
Cybercrime Google Domains Impacted by Recent ccTLD Hijacks Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. By Ionut Arghire | October 9, 2026 …
ai-security
EN
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
Malware & Threats In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK …
Artificial Intelligence OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks The ChatGPT maker said the researchers “violated clear policies on handling sensitive information.” By Associated …
Friday Squid Blogging: I Caught a Squid On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel …
ai-security
EN
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Cyber Espionage The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited …
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Cryptojacking Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected …
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Artificial Intelligence Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using …
ai-security
EN
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
** Swati Khandelwal ** Oct 09, 2026 Vulnerability / Endpoint Security Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux …
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February . Florida, Iowa, Montana and Nebraska allege the California …
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword . “Compared with the variants we usually observe, P7 reduces …
** Swati Khandelwal ** Oct 09, 2026 Cybercrime / Data Breach The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X . …
ai-security
EN
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over …
ai-security
EN
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
** Ravie Lakshmanan ** Oct 08, 2026 Hacking News / Cybersecurity News The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an …
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The …
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and …