Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
** Ravie Lakshmanan ** Oct 06, 2026 The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal …
ai-security
EN
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product’s web application root …
** Swati Khandelwal ** Oct 06, 2026 Vulnerability / Open Source Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in …
ai-security
EN
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public …
** The Hacker News ** Oct 06, 2026 Supply Chain / Artificial Intelligence In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs …
ai-security
EN
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade …
ai-security
EN
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
** Swati Khandelwal ** Oct 06, 2026 Vulnerability / Open Source A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security …
Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google …
Another Historic Cipher Falls to AI This one is from 1809, written by Napoleon’s nephew. Tags: AI , cryptography , history of cryptography Posted on October 5, 2026 at 7:04 AM • 5 Comments
ai-security
EN
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
** Ravie Lakshmanan ** Oct 05, 2026 Zero-Day / Vulnerability Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as …
** Ravie Lakshmanan ** Oct 05, 2026 Vulnerability / Web Security A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. …
** Ravie Lakshmanan ** Oct 05, 2026 Vulnerability / Artificial Intelligence Apple has announced that it’s taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) …
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through …
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling . …
** Ravie Lakshmanan ** Oct 05, 2026 Vulnerability / Email Security Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an …
ai-security
EN
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were …
For an experiment, I created a script [ 1 ] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those …
ai-security
EN
ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)
ISC Stormcast For Monday, October 5th, 2026 <https://isc.sans.edu/podcastdetail/10122>
Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs. Like when I see an “authorized” scan: Or when I’m owned for the …
** Ravie Lakshmanan ** Oct 04, 2026 Cyber Espionage / Phishing A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial …
YARA-X 1.21.0 Release Published 2026-10-03. Last Updated 2026-10-03 14:40:21 UTC by Didier Stevens (Version: 1) 0 comment(s) YARA-X’s 1.21.0 release brings 5 improvements and 4 bugfixes. One …
ai-security
EN
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
A suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, Reuters reported , citing three …
** Ravie Lakshmanan ** Oct 03, 2026 Vulnerability / Critical Infrastructure The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint …
Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, …