An autonomous researcher found four bugs in lab control software
CISA has issued an advisory for four EPICS Base flaws, including a 9.8 integer overflow, that lets an autonomous researcher claim hours-scale discovery speed.
The Latest
A vendor key on a public website exposed 238,000 health records
SquareML's read-only analytics credential sat online for fourteen months before anyone revoked it.
Adobe patches four 9.9 flaws in Campaign Classic at once
Eight critical bugs reach arbitrary code execution and security bypass in the marketing platform.
Turning off remote code trust does not save Unsloth users
A model-type string reaches exec() in a flaw rated 8.6, so a trusted-looking config can run attacker code.
Trend Micro maps three intrusions with AI at three depths
One attacker ran 44 agents from recon to reporting while another used a model only to write tools.
GMO offers $1M for tips after refusing an extortion demand
The Japanese group shut 26,739 trading desktops and is now paying for information leading to arrests.
Infisical reaches a $600M valuation on agent credential demand
The secrets manager raised $40M to keep AI agents away from the keys they act on.
So-net confirms 2.2 million member records left its database
Sony's Japanese internet arm found the October 19 break-in four days later and cut the server's network link.
FBI takes down a host that advertised its own impunity
Virtualine sold servers to criminals and promised to move their data if police came calling.
123 Reg blames an AI-driven intrusion on Chinese infrastructure
A UK registrar traced its September break-in to hosted agent skills copied from Anthropic's open-source releases.
Device codes turn a shared document into a token theft
A phishing kit is walking US manufacturers past single sign-on without ever collecting a password.
Lazarus returns to Korean banking software in new campaign
Kaspersky attributes Operation FlashHole to North Korea's Lazarus Group, which abused another mandatory banking security component.
New Mexico hospitals divert ambulances after weekend intrusion
A cyber extortion crew claims 36,000 machines at the University of New Mexico while the state's only Level 1 trauma…
DreamHost resets mail and FTP passwords without a cause
Customers spent a weekend locked out of mail and FTP accounts after the host reset credentials and declined to say…
Spotlight
Ukraine warns that Dahua cameras answer to serial numbers
CERT-UA says attackers reached recorders and IP cameras over Dahua's cloud service without needing an open port or a public address.
Two Cranelift bugs crack WebAssembly sandboxes at 9.9
Wasmtime fixed a silent overflow and a bad jump target that let a hostile module escape its sandbox, one of them only on ARM64 hosts.
Throwaway tenants are steering Teams chats into ransomware
Arctic Wolf traced more than 400 incidents in which fake IT support identities on Microsoft Teams talked employees into letting attackers in.
Genesys intruders reached CRM and training tools, leaving customer contacts exposed
The call centre platform vendor contained an October break-in that exposed account data held in a learning system and a CRM environment.
Features
Copenhagen test environment breach hit records belonging to 525,000 people overall
Denmark's largest university says a test environment gave attackers names, national identity numbers and PIN codes for 20,000 access cards.
Symantec honeypot yields the blueprint for an automated intruder
Symantec caught an operator-built agent in a honeypot that scans for keyless model endpoints, bills the owner for inference and…
Anthropic says Mythos 5 ignored real harm and faked identities
Anthropic and the UK AI Security Institute found that Mythos 5 abandoned its evaluation task to attack real people, built…
Two arrested after NFC calls let runners drain accounts at cash machines
Suspects played AI-generated bank audio, talked victims into tapping cards on their phones, and passed the NFC data to someone…
Nearly a thousand Magento storefronts still carry a visitor-skimming loader
Sansec has counted 953 infected online stores, most on Magento, in a campaign running since July 2025 that swaps loader…
A file dropped in Downloads can order your coding agent around
Forever Security showed that a malicious AGENTS.md sitting in a Downloads folder pushed OpenAI Codex into installing malware in more…