A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta’s Muse because it doesn’t identify itself as a bot while browsing; Instinct keeps raising …
ai-security
EN
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
** Ravie Lakshmanan ** Oct 12, 2026 Cybersecurity News / Hacking Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already …
The Traffic Light Protocol (TLP)[ 1 ], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how …
Cybercrime Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 …
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that …
ai-security
EN
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
In environments studied for the 2026 State of Agent Security Report , roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to …
ai-security
EN
ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)
ISC Stormcast For Friday, October 9th, 2026 <https://isc.sans.edu/podcastdetail/10130>
ai-security
EN
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models …
Vulnerabilities Citrix Urges Immediate Patching of Critical NetScaler Vulnerability The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. By Ionut …
ai-security
EN
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Application Security Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security OSS Scanner sends unreviewed, model-generated vulnerability reports to open source …
Government US Disrupts Chinese State-Sponsored Hacking Tools Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. By Ionut Arghire | October …
Vulnerabilities Unpatched AhsayCBS Vulnerabilities Exploited in the Wild The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. By Ionut …
Malware & Threats Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost …
Cybercrime Google Domains Impacted by Recent ccTLD Hijacks Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. By Ionut Arghire | October 9, 2026 …
ai-security
EN
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
Malware & Threats In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK …
Artificial Intelligence OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks The ChatGPT maker said the researchers “violated clear policies on handling sensitive information.” By Associated …
Friday Squid Blogging: I Caught a Squid On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel …
ai-security
EN
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Cyber Espionage The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited …
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Cryptojacking Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected …
** Ravie Lakshmanan ** Oct 09, 2026 Vulnerability / Artificial Intelligence Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using …
ai-security
EN
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
** Swati Khandelwal ** Oct 09, 2026 Vulnerability / Endpoint Security Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux …
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February . Florida, Iowa, Montana and Nebraska allege the California …
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword . “Compared with the variants we usually observe, P7 reduces …
** Swati Khandelwal ** Oct 09, 2026 Cybercrime / Data Breach The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X . …