Starting yesterday, our sensors picked up a small number of scans for “wordfence-waf.php”. This particular script is used by Wordfence, a solution to protect WordPress sites. During the …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
ai-security
EN
ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)
ISC Stormcast For Tuesday, September 29th, 2026 <https://isc.sans.edu/podcastdetail/10114>
ai-security
EN
ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)
ISC Stormcast For Wednesday, September 30th, 2026 <https://isc.sans.edu/podcastdetail/10116>
Using Device Linking to Eavesdrop on WhatsApp and Signal Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this …
** Ravie Lakshmanan ** Sep 29, 2026 Artificial Intelligence / Supply Chain OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was …
** Swati Khandelwal ** Sep 29, 2026 Identity Security / Artificial Intelligence A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth …
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. “It is true that this month a 24-year-old man from Amsterdam was …
ai-security
EN
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
** Ravie Lakshmanan ** Sep 29, 2026 Supply Chain / Malware Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber …
ai-security
EN
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed …
A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time ( JIT ) engines present in web …
** Ravie Lakshmanan ** Sep 29, 2026 Vulnerability / Enterprise Security Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a …
An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration …
Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is …
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of …
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The …
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those …
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small …
** Ravie Lakshmanan ** Sep 28, 2026 Vulnerability / Endpoint Security Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have …
ai-security
EN
ISC Stormcast For Monday, September 28th, 2026 https://isc.sans.edu/podcastdetail/10112, (Mon, Sep 28th)
ISC Stormcast For Monday, September 28th, 2026 <https://isc.sans.edu/podcastdetail/10112>
Authorities in the Netherlands have arrested a 24-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters . In the days …
New Attack Against RSA ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring. First, this attack isn’t new. The original research is from 2007 . What is new is the …
** Ravie Lakshmanan ** Sep 28, 2026 Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway …
ai-security
EN
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the …
** The Hacker News ** Sep 28, 2026 Identity Security / AI Agent Security AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, …
ai-security
EN
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent …