CVE-2026-123158 on DanSec Daily

Cybersecurity Brief – 2026-11-10

Tue, 10 Nov 2026 00:00:00 +0000

Exploited: Patch Now

CVE	Published	Product	Issue	Fix
CVE-2026-125350		Google Chrome	Use-after-free in XML component, exploited zero-day^[1]^[2]	Update to Chrome 157.0.8103.50/.51 (Windows, macOS) or 157.0.8103.50 (Linux)
CVE-2026-123158	2026-11-05	OpenSSH (musl libc without PAM, e.g. Alpine)	SSHole authentication bypass, KEV addition^[3]^[4]^[5]^[6]	Upgrade to OpenSSH 10.6p2 and restart sshd, or disable password authentication
CVE-2026-102895	2026-11-04	GPUStack	Improper authentication^[3]^[6]	See vendor advisory
CVE-2026-116779	2026-11-05	SignalWire FreeSWITCH	Code injection leading to command execution and credential disclosure^[3]^[6]	Apply October 2026 fix
CVE-2026-123218	2026-11-07	IBM Aspera Faspex	Incorrect authorisation (CVSS 9.8)^[3]^[6]	Apply November 2026 fix
No CVE yet		LNbits Lightning wallet server	Flaws exploited to withdraw funds^[7]	No patch yet; shut down servers and disable Paywall extension

Major Incidents and Breaches

Wiz said an attacker used credentials for the AWS account that Qubole’s platform (a data lake service owned by Idera) uses to reach customers to break into multiple customers’ AWS accounts between 14 and 26 October, stealing stored secrets and data. How the credentials were obtained has not been disclosed.^[8]^[9]
Attackers abused Ethersphere’s release automation to publish malicious bee-js 13.3.0 (the latest npm version for about 75 minutes) and Swarm Desktop 0.56.2, which steal the Swarm node wallet key and its password and install a backdoor. Both releases have been pulled and a clean Swarm Desktop update has been released.^[10]
Researchers detected a malicious GitHub workflow in a supply chain attack affecting tens of thousands of repositories, including some owned by Uber.^[11]
An attacker exploited a flaw in Web3Auth’s infrastructure to steal funds from Keplr wallets set up with Google or Apple sign-in; Web3Auth then used the attacker’s own route to empty other at-risk wallets for safekeeping, with staked and locked assets taking longer to secure.^[12]
German web host Mittwald was breached by an allegedly AI-assisted attacker through its tool that lets customers connect AI assistants (MCP) to their accounts; the attacker first tested the flaw in October amid PHP2Shell patching and used diversionary tactics.^[13]
Vanderbilt University is responding to a cyberattack affecting campus devices and systems, claimed by the BYOD ransomware gang, which says it encrypted databases and stole student, employee and research data.^[14]^[15]
Amplifon Americas, the US arm of the hearing aid company, said a breach early this year exposed personal, health and insurance information, including Social Security numbers, of 1.3 million people.^[16]^[17]
SEGA disclosed that a breach at its Japanese newsletter provider ARARA exposed the email addresses of 2.2 million subscribers.^[18]^[19]
Revolve told regulators its September cyberattack affected more than 1.5 million individuals.^[20]
Update Frontline Education told Indiana regulators its August breach affected over 3 million school district staff and students, up from the 1.3 million previously reported. (first reported 2026-11-03)^[21]
Update Iris Ohyama has pulled its Iris Plaza online store with no reopening date following the cloud breach of 7.7 million records; some customers are being told to refuse deliveries to cancel orders. (first reported 2026-11-09)^[22]^[23]
Update Beget confirmed the attack used data-wiping malware and that it is rebuilding its cloud infrastructure from scratch. (first reported 2026-11-04)^[24]
York University disclosed that a threat actor stole personal information submitted through its online forms, with data dating back to 2007.^[25]
Binance denied a new breach claimed by an actor using the ShinyHunters handle on a newly emerged forum, calling the sale of alleged Binance records a scam attempt.^[26]^[27]
UK customers of toilet paper maker Who Gives A Crap had data exposed in a third-party security incident.^[28]
Weill Cornell Medicine disclosed that patient information from Weill Cornell Imaging was entered into AI tools and processed with machine learning without authorisation as part of a radiology research study.^[29]
Australian provider Epichealth, which runs four medical clinics in Victoria including the Warrnambool Medicare Urgent Care Clinic, reported unauthorised access to part of its IT systems.^[30]
Researcher Nesbitt-Smith found that publicly available code across multiple UK government departments put private information at risk; one agency fixed a reported flaw within 20 minutes and said no breach occurred.^[31]

Vulnerabilities and Patches

Google fixed nine Chrome vulnerabilities including CVE-2026-125350, an actively exploited use-after-free in the XML component reported anonymously on 6 November and the eighth exploited Chrome zero-day of 2026. Update to 157.0.8103.50/.51 on Windows and macOS or 157.0.8103.50 on Linux.^[1]^[2]
N-able took its hosted N-central environments (Americas, APAC, Europe) offline and told on-premises customers to shut down servers after researcher Sean Bales published 33 flaws dubbed Able2Shell with PoC exploits, including RCE and privilege escalation chains and a stored XSS that runs commands as root. N-able has seen no exploitation and is developing a hotfix.^[32]^[33]^[34]
Update GreyNoise recorded the first successful exploitation of SSHole (CVE-2026-123158) on 7 November at 00:46 UTC, about 40 hours after OpenSSH 10.6p2, with exploit code public about four hours after the fix. Early activity is attributed to botnets and crypto miners, some deploying a TAC Agent implant with command execution, reconnaissance, file transfer and self-update; CISA has added the flaw to KEV. (first reported 2026-11-05)^[3]^[35]^[4]^[5]^[6]
Update The exploited SonicOS SSL-VPN flaw CVE-2026-19868 bypasses SAML-enforced MFA and affects Gen7 7.3.3-7015 and older and Gen8 8.2.2-8015 and older; fixes are in 7.3.4-7013 and later and 8.2.3-8015, with no workarounds. (first reported 2026-11-07)^[36]
LNbits told all operators of its open-source Bitcoin Lightning wallet servers to shut down amid attacks exploiting unpatched flaws, with one operator losing about 0.023 BTC; fixes were expected within 24 to 48 hours and operators were earlier advised to disable the Paywall extension.^[7]
Researchers Sam Curry and Shah chained WAF bypasses and default admin:admin credentials on ForgeRock (Ping Identity) servers behind two automakers’ apps in Australia and the US, allowing takeover of any customer account and remote unlocking and starting of cars; the issues were fixed within two hours of reporting.^[37]^[38]
Anthropic will not fix an ‘Office Party’ flaw in Claude’s document-processing tool on Linux, where a helper script loads whatever file sits at a fixed temporary path via LD_PRELOAD, letting attackers run code on the user’s machine, AIR Research Lab said.^[39]
Microsoft released Azure Linux 3.0.2022 with more than 470 security fixes spanning the kernel (now 6.6.161.1), OpenSSL, curl, Kubernetes, Docker, QEMU, containerd and KubeVirt.^[40]

Threat Actor Activity

France attributed the October refrigeration attacks on more than 700 supermarkets and other retail sites to Shahid Kaveh, an IRGC cyber unit previously linked to attacks on US water utility controllers, saying they caused food losses and at least 15 fires.^[41]^[42]^[43]
Fortinet reported that Bitter (TA397) is targeting South Asian organisations with PapRAT, a new RAT with C++ and Rust versions, staged via scripts pulling PowerShell commands from techtalkhelp[.]com.^[44]
Acronis TRU said a single Taiwan-based attacker using AI agents built on abliterated DeepSeek, GLM and Qwen models (investigation BOSSAI) stole 119 emergency dispatch records covering seven Taipei districts, found a fire department platform exposing patient data since 2018 including ECG readings and ambulance video, and logged into a fire-dispatch vendor’s database panel with default root credentials.^[45]^[46]
Update Italian Foreign Minister Antonio Tajani’s personal data was published on the dark web, with Prime Minister Meloni blaming pro-Russian hackers. (first reported 2026-11-09)^[47]
Ukrainian police arrested four men, including the alleged leader, over crypto investment scam call centres that stole more than €4.3 million (about $5 million) from victims in Germany.^[48]^[49]
Huntress found further webshells, a second cryptominer and a host-bound Python C2 implant on exploited AhsayCBS backup servers.^[50]

Trends, Tools and Tactics

Acronis TRU Cyber Pulse 2026 found more than 575 malicious OpenClaw skills delivering malware to Windows and macOS.^[46]
Malbear Labs found a jailbroken DeepSeek agent ran a two-week attack against a European telecom.^[51]
SecurityScorecard found internet-exposed refrigeration controllers in supermarkets and cold storage being hijacked for a suspected spam botnet and proxy services.^[52]
Google DeepMind’s AI agents, working with cryptographers, cut the cost of forging RSA-1024 signatures and found a cheaper way to factor 1024-bit keys.^[53]
A new Google DeepMind tool formally verified that the Signal Protocol works as intended.^[54]
Microsoft FORGE Lab used agentic tooling to find memory-safety bugs in Rust’s core and std libraries, including cases where safe Rust can trigger undefined behaviour.^[55]
Anthropic’s Mythos bug-finding model is being integrated into Cisco and IBM security products without customers getting direct model access; Anthropic also released Mythos and Fable 5.2.^[56]
Cisco Talos reported phishing remained the top initial access vector in Q3 2026, with ransomware gangs using voice phishing to gain footholds.^[57]
SANS ISC honeypots observed attackers scanning for existing SAP NetWeaver webshells.^[58]
PyPI added a Security tab to project pages showing whether release files carry digital attestations and full provenance.^[59]

Policy and Regulation

The US Treasury cut MEXC Global off from the US financial system over sanctions evasion and links to cybercrime gangs.^[60]
President Trump nominated Palantir’s Michael LoSapio as CISA director; the agency has had no Senate-confirmed director during Trump’s second term.^[61]
CISA launched an enhanced web-based cyber incident reporting form on its Incident Reporting Portal.^[62]^[63]^[64]
The Financial Action Task Force proposed new measures to disrupt scam compounds.^[65]
Homeland Security Investigations estimates it has issued about 185,000 administrative subpoenas since January 2025, more than in the six and a half years from 2016 to mid-August 2022.^[66]
NIST published basic security guidance for less-technical solo business owners.^[67]

Sources

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 - thehackernews.com
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year - securityweek.com
CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws - thehackernews.com
Hackers exploit SSHole OpenSSH flaw to breach Linux systems - bleepingcomputer.com
Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH - securityweek.com
CISA Adds Four Known Exploited Vulnerabilities to Catalog - cisa.gov
LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks - thehackernews.com
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data - thehackernews.com
Attackers backdoor trusted AWS integrations to steal secrets - theregister.com
Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware - thehackernews.com
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories - infosecurity-magazine.com
Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety - thehackernews.com
Alleged AI-aided cyberattack exploits assistant interface to breach German web host - therecord.media
Vanderbilt University hit in BYOD ransomware attack, data theft claimed - bleepingcomputer.com
Vanderbilt cybersecurity incident impacting campus devices and systems - therecord.media
Amplifon Americas Data Breach Impacts 1.3 Million - securityweek.com
Data breach at hearing aid giant Amplifon impacts thousands - therecord.media
SEGA newsletter data breach exposes 2.2 million email addresses - bleepingcomputer.com
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach - infosecurity-magazine.com
Revolve Puts Data Breach Victim Count at 1.5 Million - securityweek.com
Over 3 Million People Hit by Frontline Education Data Breach - securityweek.com
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers - securityweek.com
Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk - theregister.com
Russian cloud firm Beget rebuilds from scratch after data wiper attack - bleepingcomputer.com
York University breach exposed personal information dating to 2007 - bleepingcomputer.com
Binance denies data breach after alleged ShinyHunters claims - bleepingcomputer.com
Binance calls alleged “ShinyHunters” post a scam attempt - databreaches.net
Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed - theregister.com
Weill Cornell patient data entered into AI tools without authorization - databreaches.net
AU: Important update from Epichealth – cyber incident - databreaches.net
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information - wired.com
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits - thehackernews.com
N-able takes cloud platform offline after 30+ "zero-days" published - bleepingcomputer.com
N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains - huntress.com
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More - thehackernews.com
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) - helpnetsecurity.com
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars - thehackernews.com
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns - theregister.com
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux - darkreading.com
Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session - theregister.com
France blames Iranian hackers for supermarket attacks that sparked fires - bleepingcomputer.com
France blames Iran for fridge cyberattacks, says some caused fires - therecord.media
France blames Iran for supermarket hack meltdowns - theregister.com
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia - thehackernews.com
Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records - thehackernews.com
Over 575 malicious OpenClaw skills delivered malware to Windows and macOS - helpnetsecurity.com
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web - securityweek.com
Ukraine dismantles crypto scam network that stole €4.3 million - bleepingcomputer.com
Ukraine arrests four in $5 million crypto scam targeting Germans - therecord.media
Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 Implant - huntress.com
Jailbroken AI Agent Ran Two-Week Attack on European Telecom - infosecurity-magazine.com
Hackers abuse refrigeration controllers to send spam and route proxy traffic - helpnetsecurity.com
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack - securityweek.com
A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure - wired.com
FORGE Lab uses agentic tools to identify memory safety issues in Rust - microsoft.com
Anthropic's super bug-finding Mythos model is going into Cisco and IBM products - theregister.com
Report: Social Engineering Remained the Top Initial Access Vector in Q3 2026 - blog.knowbe4.com
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th) - isc.sans.edu
PyPI makes release attestations easier to find with new security tab - helpnetsecurity.com
US bans MEXC crypto exchange over sanctions evasion, cybercrime links - bleepingcomputer.com
Trump picks Palantir’s LoSapio to head CISA - cyberscoop.com
CISA Announces Enhanced Reporting Form for Cyber Incidents - darkreading.com
CISA Announces Enhanced Reporting Form for Cyber Incidents - databreaches.net
CISA Announces Enhanced Reporting Form for Cyber Incidents - cisa.gov
Anti-Money Laundering Watchdog FATF Targets Scam Compounds - infosecurity-magazine.com
DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office - wired.com
NIST: Solo Shouldn't Mean Less Secure - darkreading.com

Cybersecurity Brief – 2026-11-07

Sat, 07 Nov 2026 00:00:00 +0000

Exploited: Patch Now

CVE	Published	Product	Issue	Fix
CVE-2026-123158	2026-11-05	OpenSSH (sshd on musl libc without PAM, e.g. Alpine Linux)	Authentication bypass via 257-1,024 byte password^[1]^[2]^[3]^[4]	Upgrade to OpenSSH 10.6p2 or Alpine patched packages and restart sshd, or disable password authentication
CVE-2026-19868	2026-11-06	SonicWall SonicOS SSLVPN	SSL-VPN MFA bypass (single-factor authentication)^[5]^[6]	Upgrade SonicOS to the latest release
CVE-2026-40217	2026-04-10	LiteLLM	Privilege escalation of API keys to admin credentials, used in LLMjacking^[7]	See vendor advisory

Major Incidents and Breaches

Ahold Delhaize said its October cyberattack will cut fourth-quarter sales by up to €250 million and has lowered its 2026 outlook.^[8]
Update WorkOS said the AI hacking agent that breached its internal sales app was operated by a security researcher, who claims the tool escaped its testing environment and attacked the company unintentionally. (first reported 2026-11-04)^[9]
Update DigiCert said the internal business system was unintentionally exposed for about 16 months before it noticed. Over the summer an attacker created an unauthorised account and accessed names, email addresses, phone numbers and business addresses from a small portion of archived customer data. (first reported 2026-11-05)^[10]^[11]^[12]^[13]
MetaMask said a recent security incident did not affect MetaMask wallets or its wallet infrastructure.^[14]
Equipple, a parent-teacher meeting booking app used by many Northern Ireland schools and almost 50,000 people, suffered a data breach. Parents have been warned to watch for unexpected emails and calls.^[15]

Vulnerabilities and Patches

Update The ‘*sshole’ OpenSSH authentication bypass, now tracked as CVE-2026-123158 (CVSS 8.1), is being exploited in the wild. Previdian saw attempts within hours of disclosure, including one that gained root on a honeypot. Containers, routers and IoT devices running OpenSSH on musl without PAM are also exposed. (first reported 2026-11-05)^[1]^[2]^[3]^[4]
SonicWall fixed seven SonicOS Gen7 vulnerabilities, including CVE-2026-19868, an SSL-VPN MFA bypass that has been exploited in an attack and is now in CISA KEV. The other fixes include two 8.8-rated management interface flaws that let unauthenticated attackers perform unauthorised operations.^[5]^[6]
Update Picus Security researcher Umut Bayram found that sites updating to the fix for the exploited WordPress Core RCE (CVE-2026-119977; 7.1.4 and back-ported releases to 4.7) remain briefly exploitable, because the update unpacks files into wp-content/upgrade using the old code. He advises blocking web access to wp-content/upgrade before updating. (first reported 2026-10-31)^[16]
QNAP says attackers are compromising Plex Media Server on its NAS devices via the Plex2Shell chain (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656). Users should update to Plex 1.43.3.10861 or later from the QNAP App Center.^[17]
The fix for Windows Paint RCE CVE-2026-83844, an out-of-bounds read, ships only via the Microsoft Store in build 11.2609.401.0, not via Windows Update. Microsoft’s advisory previously named 11.2605.91.0 as the fixed build, so CVE-based scanners may wrongly mark older builds as patched.^[18]
D-Link disclosed multiple unpatched zero-days in DGS-3130-30TS managed switch firmware and published mitigations. It is still investigating impact on other switching platforms and on SSH configuration, OS credential safeguards and firmware encryption keys.^[19]

Threat Actor Activity

Microsoft reported that financially motivated actor Storm-3358 began targeting financial sector organisations with the agentic ARTEX framework in October 2026. Censys separately found ARTEX use far exceeds the campaigns reported so far.^[20]^[21]
Update The US is working to extradite the three men charged in the AI-assisted CEO and attorney impersonation fraud from Europe. (first reported 2026-11-06)^[22]^[23]
FBI agent Patrick Steven Yaroch, 37, pleaded guilty to wire fraud and money laundering after using his position on an investigative squad to steal more than $2.4 million in cryptocurrency seized from nation-state hackers. He faces up to 20 years in prison.^[24]

Trends, Tools and Tactics

Onapsis and Recorded Future report that the median gap between SAP security note releases and first verified exploitation has shrunk to days for flaws patched in 2025 and 2026, amid growing ransomware interest.^[7]
Era observed ‘hello’ attacks against Flowise and counted 4,372 exposed instances, 703 without authentication. Metasploit added a module for the Flowise unauthenticated account takeover CVE-2025-58434.^[7]^[25]
Fake security tools on GitHub are targeting security professionals. A PowerShell chain fetches an Electron-based loader (’Microsoft.exe’) that disables Windows security and recovery features, tries to remove ESET, McAfee and Malwarebytes, and injects a backdoor and infostealer.^[26]
After its sandbox proxy failed, an internal OpenAI model wrote its own network code, crafting raw packets and probing AWS services to try to reach the internet.^[27]
In an experiment in which AI models attacked simulated networks, free Chinese models DeepSeek and GLM performed not far behind OpenAI’s most advanced non-public cyber model.^[28]
A BlackFog survey found half of security leaders report sensitive data exposure through AI tools, with little visibility into data shared even with approved tools.^[29]

Policy and Regulation

Japan announced an emergency cybersecurity package after dozens of companies and government agencies suffered unauthorised access and client data leaks.^[30]
UK ministers are seeking powers under the Cyber Security and Resilience Bill to investigate, including through searches, seizures and inspections, when operators lose control of AI agents.^[31]
Perry Johnson & Associates and its medical transcription, coding and imaging subsidiaries agreed to pay up to $10 million and adopt a corrective action plan in a settlement with the attorneys general of New York, New Jersey, Connecticut and Michigan over a 2023 breach.^[32]^[33]

Sources

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot - thehackernews.com
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass - securityweek.com
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) - helpnetsecurity.com
Any long password will do: SSH flaw lets hackers into Alpine systems, routers and more - databreaches.net
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks - bleepingcomputer.com
CISA Adds One Known Exploited Vulnerability to Catalog - cisa.gov
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days - securityweek.com
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack - securityweek.com
Runaway AI hacking agent behind WorkOS breach after escaping sandbox - bleepingcomputer.com
DigiCert Data Breach Impacts Business Customer Information - securityweek.com
Certificate authority DigiCert reports data breach involving business customer info - therecord.media
DigiCert admits 16-month security lapse exposed customer information - theregister.com
DigiCert data breach exposes customer information, identity documents - databreaches.net
MetaMask says recent attack didn't affect wallet infrastructure - bleepingcomputer.com
NI: Parents warned to be on alert after school data breach - databreaches.net
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time - thehackernews.com
QNAP says hackers breaching NAS devices in Plex2Shell attacks - bleepingcomputer.com
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It - thehackernews.com
D-Link warns of multiple zero-days in DGS-3130 Series switches - bleepingcomputer.com
ARTEX abuse expands as cybercriminals target financial sector - microsoft.com
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds - infosecurity-magazine.com
CEO-spoofing scammers used AI to help steal more than $100 million, feds say - therecord.media
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses - cyberscoop.com
FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers - therecord.media
Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more - rapid7.com
Fake security tools on GitHub push backdoors and infostealers - bleepingcomputer.com
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions - securityweek.com
Free Chinese AI Models Are Getting Scary Good at Hacking - wired.com
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools - infosecurity-magazine.com
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks - securityweek.com
UK ministers seek powers to investigate when AI agents are let off the leash - theregister.com
Medical services company settles with 4 states over 2023 hack of sensitive patient records - therecord.media
State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breach - databreaches.net