Wireshark 4.6.9 Released Published 2026-09-27. Last Updated 2026-09-27 15:04:49 UTC by Didier Stevens (Version: 1) 0 comment(s) Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs. Didier …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
ai-security
EN
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
** Ravie Lakshmanan ** Sep 28, 2026 Cybersecurity News / Hacking A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving …
** Swati Khandelwal ** Sep 27, 2026 Vulnerability / Network Security Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in …
ai-security
EN
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex …
** Ravie Lakshmanan ** Sep 26, 2026 Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint …
** Ravie Lakshmanan ** Sep 26, 2026 Threat Intelligence / Vulnerability Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the …
** Ravie Lakshmanan ** Sep 26, 2026 Vulnerability / Web Security Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by …
Before an AI agent gets access to your environment, you should be able to answer a few basic questions. Who owns it? What is it allowed to do? What can it reach, and how will you know when it does …
** Ravie Lakshmanan ** Sep 26, 2026 Vulnerability / Web Security Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting …
On Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow “GET” requests that include a body. The main reason for this was that GET …
ai-security
EN
ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)
ISC Stormcast For Wednesday, September 23rd, 2026 <https://isc.sans.edu/podcastdetail/10106>
Introduction I’ve found several legitimate websites with injected script for a campaign using the ClickFix social engineering technique . This particular ClickFix campaign was documented earlier …
ai-security
EN
ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)
ISC Stormcast For Thursday, September 24th, 2026 <https://isc.sans.edu/podcastdetail/10108>
Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is …
ai-security
EN
ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)
ISC Stormcast For Friday, September 25th, 2026 <https://isc.sans.edu/podcastdetail/10110>
Introduction My previous post on Macfinger ClickFix was two days ago, and this campaign remains active. The more I look into the malware delivered by this campaign, the more I believe it is not a …
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was …
Threshold signature schemes, a form of multi-party computation (MPC) that lets a set of parties sign together without any one of them holding the key, are increasingly deployed inside trusted …
GPT-6 Astra Breaks an Old Enigma Message This is pretty amazing: > However, the most astonishing thing about this break is that the GPT6 Astra did it entirely on its own. Carter Leffer only …
Research on Models Engaging in Genie-Like Behavior New paper: “ Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training .” > Abstract: > …
On Anthropic’s AI Misuse Report Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings. …
Malicious npm Packages That Evade Defenses This is an impressive piece of malware . Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution. Tags: …
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee I feel like someone who reads this blog will want to go to this : > Families are invited to dive into the fascinating …
** Ravie Lakshmanan ** Sep 25, 2026 Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and …
** Swati Khandelwal ** Sep 24, 2026 Vulnerability / Mobile Security A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special …