Latest news
-
AI Security via AI Incident Database
Papua New Guinea moves to outlaw AI deepfakes as victims call for more protection
An AI-generated image showing Jennifer Baing with a group of people holding cash standing behind another pile of cash. Jennifer Baing says AI-generated images of her…
-
AI Security via AI Incident Database
Mouvement des lycéens en France : faux, cette vidéo ne montre pas un manifestant recevant un coup violent d’un policier
EN BREF : Cette vidéo a été générée par intelligence artificielle et diffusée sur les réseaux sociaux depuis juin 2026. Sur Facebook, l’activiste Natalie Yamb, très…
-
Threat Intel via Huntress
ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
-
Ransomware via Zscaler ThreatLabz
Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access
Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well.
-
Vulnerabilities via oss-security
Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
Posted by Solar Designer on Oct 16 Hi, Here's an update: We stayed in the range of 319 to 400 accepted messages per month for June through September. However, the number…
-
Breaches via oss-security
Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
Posted by Stig Palmquist on Oct 16 CVE-2026-110752 Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111…
-
AI Security via Simon Willison
Quoting Addy Osmani, Morgan Westlee Lunt, and Qing Wang
We think "did a human read the code?" is an imprecise proxy for "what could go wrong with this change, and which check—automated or human—is the right one to catch it?"…
-
Vulnerabilities via oss-security
Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries
Posted by Alan Coopersmith on Oct 16 All five library releases are available now, see https://lists.x.org/archives/xorg-announce/2026-October/thread.html for links to…
- Advertisement
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Prafesta Ind. e Com. de Embalagens Ltda
packaging manufacturing (extrusion) · Brazil | Senior Sapiens ERP and Vetorh HR payroll platform; eSocial government payroll filings September and October 2026…
-
Vulnerabilities via Zscaler ThreatLabz
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery…
-
Threat Intel via Schneier on Security
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk…
-
AI Security via Ars Technica
OpenAI models hacked a crypto wallet and breached more websites
OpenAI said internal models hacked two more websites, bypassed company-imposed browsing restrictions, and used exposed credentials to draw cryptocurrency from a wallet…
-
Vulnerabilities via Dark Reading
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
-
Vulnerabilities via Canadian Centre for Cyber Security
Google security advisory (AV26-1060)
Serial number: AV26-1060 Date: October 16, 2026 As of October 15, 2026, Google is affected by vulnerabilities in the following product: Chrome Versions prior to…
-
Vulnerabilities via BleepingComputer
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to…
-
AI Security via Dark Reading
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
-
Threat Intel via Dark Reading
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
-
AI Security via Dark Reading
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
-
Ransomware via ransomware.live
🏴☠️ Redact has just published a new victim : ONEOK, Inc.
Sector: Oil & Gas Energy | Revenue: $39.4B USD
-
Vulnerabilities via Canadian Centre for Cyber Security
BMC Helix security advisory (AV26-1059)
Serial Number: AV26-1059 Date: October 16, 2026 As of October 15, 2026, BMC Helix is affected by a vulnerability in the following product: BMC Helix Network Management…