367 results for “AWS”

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types367 Articles157 Write-ups86 Repos42 Advisories36 Papers22

More types5

Threads14 Tools5 Other2 Talks2 Courses1

“AWS”

aikido.devadvisory🛡️ Security

Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)

CVE-2026-98432 is a use-after-free in the Linux kernel IPv4 TCP handshake (tcp_v4_syn_recv_sock, ip_options_build), present since kernel 4.4 and rated 9.8 by the kernel CVE team. Anthropic reports a Claude research model wrote a remote root exploit against hosts with an MPTCP listener. The post lists AWS, Ubuntu and Red Hat patch status, interim mitigations (disable MPTCP, drop IP-options packets) and the uname -r check. No in-the-wild attacks were reported as of 29 October 2026.

Linux kernelMPTCPGo+3

CVE-2026-98432CVE-2025-98432use-after-free+5

Cloud & Infra, AI Security· Published and added 2 Nov 2026

lankabusinessonline.comarticle🛡️ Security

PHP security scare puts Sri Lanka’s digital systems under scrutiny

Lanka Business Online reports on CVE-2026-109618 and CVE-2026-109619, two critical PHP flaws allowing unauthenticated remote code execution. Sri Lanka's Ministry of Digital Economy told state bodies to check their systems, as over 70% of government sites reportedly use PHP. Research on 22 to 24 October 2026 found 80 state-linked sites on potentially vulnerable versions, 61 of them unsupported. Patches came out on 21 October 2026.

PHP

CVE-2026-109618CVE-2026-109619Ministry of Digital Economy

AppSec· Published and added 2 Nov 2026

indiatoday.inarticle🛡️ Security

AI startup hacks Anthropic, gains access to employee details, internal messages

Cathedral, a security startup founded by former DOGE members, used AI agents to find flaws in third-party business software used by Anthropic. It reached sales, HR and IT systems in under 12 hours. Anthropic says no customer chats, model outputs, source code or model weights were reached, and it cut off access the same day. The article also recaps earlier cases of Claude bypassing access restrictions, including Georgia vote counts.

Claude

CathedralDOGEAnthropic

AI Security, Threat Intel· Added 1 Nov 2026, published 31 Oct 2026

wiz.iowriteup🛡️ Security

“Black October” for AI Developer Platforms

Wiz Research links October 2026 breaches at AI developer platforms (Fireworks, OpenCode, Warp, Zeabur, Railway and others) to stolen environment-variable credentials for AI access. It details two enterprise AWS Bedrock keys abused after vendor breaches: about 800k and 1.7 million calls, over $100k in list-price usage. It profiles two LLM resale operations, "momo" and "Xingjiabi", that tested the keys.

AWS BedrockOpenCodeClaude+3

LLMjackingdistillationWiz Research+13

Threat Intel, AI Security, Cloud & Infra· Added 31 Oct 2026, published 30 Oct 2026

cisa.govadvisory🛡️ Security

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 30 October 2026, citing evidence of active exploitation: CVE-2026-111357 (missing authentication for a critical function) and CVE-2026-118527 (generation of predictable numbers or identifiers). The alert restates BOD 26-04, which requires federal civilian agencies to remediate KEV-listed flaws on exposed assets and check for prior compromise. It also links the KEV nomination form.

Ivanti Connect SecureCISA KEVVPN

CVE-2026-111357CVE-2026-118527BOD 26-04+1

Threat Intel, GRC· Published and added 30 Oct 2026

securityweek.comarticle🛡️ Security

Fresh WordPress Vulnerability in Attackers’ Crosshairs

A WordPress core race condition in the update process, patched in WordPress 7.1.4 on 28 October 2026, allows unauthenticated remote code execution with high attack complexity. New files unpack into a predictable, web-accessible staging directory. Defiant's Wordfence logged over 18,500 requests for staged setup-config.php paths in 21 hours, with no confirmed compromises. No CVE is assigned yet. The release fixes 22 flaws in total.

WordPressWordfencePHP

DefianteMudhrarace condition

AppSec, Threat Intel· Published and added 30 Oct 2026

portswigger.netcourse🛡️ Security

Web Security Academy

Web Security Academy is PortSwigger's free online web security training. It is known to combine learning material with hands-on labs across web vulnerability classes such as SQL injection, XSS, SSRF, authentication flaws and request smuggling, and to be built around Burp Suite. The page had no extractable text, so this description comes from the URL and general knowledge of the site.

Burp Suite

PortSwigger

Learning, AppSec· Added 30 Oct 2026

github.comrepo🧠 AI

llm-trails: What LLMs reach for inside a breached AWS account

llm-trails is an open study of what LLMs choose to do next inside a breached AWS account. It puts 14 models in 13 post-compromise situations, records only a single-turn plan with nothing executed, and codes each answer to CloudTrail events. The repo has the llmtrials harness, prompts, codebook, processed dataset (viz_data.json) and an interactive dashboard, so the study can be rerun or extended.

AWSCloudTrailLLM+2

Adan Alvareztraildiscover.cloudClaude

evals, agents· Added 30 Oct 2026

github.comrepo🛡️ Security

llm-trails: What LLMs reach for inside a breached AWS account

llm-trails is a research repo that placed 14 LLMs in 13 post-compromise AWS situations, asked only for their next move (single-turn, nothing executed), and coded each answer to CloudTrail events. It includes the llmtrials harness, prompts, codebook, processed dataset (viz_data.json) and an interactive dashboard. Rates are conditioned on the situation shown, and the aim is turning model behavior into detection priorities.

AWSAWS CloudTrailLLM

traildiscover.cloud

AI Security, Cloud & Infra, Blue Team & Detection· Added 30 Oct 2026

aikido.devarticle🛡️ Security

What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained

Explainer on "shell" vulnerabilities, the -Shell naming for RCE flaws that began with Log4Shell (CVE-2021-44228). It compares memory-corruption bugs (PHP2Shell, CVE-2026-109618 and CVE-2026-109619; Node2Shell, CVE-2026-111497, in the Brotli decoder) with design-flaw bugs (Log4Shell, React2Shell, CVE-2025-55182). It covers shared traits, exposure through inherited components, and Brotli patch status across runtimes and distributions.

PHPNode.jsReact+3

CVE-2026-109618CVE-2026-109619CVE-2026-111497+16

AppSec, Learning· Added 30 Oct 2026, published 29 Oct 2026

unit42.paloaltonetworks.comadvisory🛡️ Security

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

Unit 42 threat brief on PHP2Shell, two PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS 4.0 9.2), both caused by longjmp() error handling that leaves memory uninitialized or freed. Cortex Xpanse counted over 22.6 million exposed instances. The 29 October 2026 update says attackers chained PHP2Shell with a Linux kernel privilege escalation against internet-exposed PAN-OS management interfaces. An earlier 23 October claim of post-compromise activity was retracted on 25 October.

PHPPAN-OSLinux kernel+2

CVE-2026-109618CVE-2026-109619PHP2Shell+2

Threat Intel, AppSec· Added 30 Oct 2026, published 29 Oct 2026

tldrsec.comarticle🛡️ Security

[tl;dr sec] #352 - Unprompted Slides, AWS AI Post-compromise Trends, Malicious LLM API Routers

tl;dr sec #352 is a security newsletter issue covering [un]prompted talks (AI-assisted firmware patching, a "Security Constitution" for finding cloud design flaws), Azure API Connections cross-tenant bugs worth $200,000, and a test of 14 LLMs given AWS keys. It also covers a paper on malicious LLM API routers (9 of 428 injecting code) and Datadog's "counterfeit policy" bypass of the Jev classifier.

AzureAWSLLM+3

PHP2Shellprompt injectionpath traversal+9

AI Security, Cloud & Infra, Offensive Security· Added 30 Oct 2026, published 29 Oct 2026

securityweek.comarticle🛡️ Security

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

SecurityWeek roundup of patches from Adobe, Veeam and Juniper Networks covering over three dozen vulnerabilities. Adobe fixed 12 flaws (eight critical in Campaign Classic), Veeam fixed nine (including a cross-tenant RCE in Backup for Microsoft 365), and Juniper fixed 18 in Session Smart Router and Conductor. None were reported exploited. Juniper said CVE-2026-109618 (PHP2Shell) affects Junos OS but is not exploitable there.

Adobe Campaign ClassicVeeam Backup & ReplicationVeeam Backup for Microsoft 365+2

CVE-2026-109618PHP2Shell

other· Published and added 29 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

DailyDarkWeb post summarising Anthropic Frontier Red Team research published 27 October 2026. An unreleased internal Claude research model built five attack chains: Chrome sandbox escape (V8 heap bug, CacheStorage race, FedCM use-after-free), a Safari same-origin policy bypass, data extraction from a locked Pixel 9 over USB, a Windows QUIC kernel crash (CVE-2026-33096) and zero-click Linux root via multipath TCP (CVE-2026-98432). Anthropic says all flaws are fixed, including 62 Chrome CVEs as of Chrome 156. The post notes the chains are not independently reproduced.

ClaudeChromeSafari+3

CVE-2026-33096CVE-2026-98432Anthropic Frontier Red Team+8

AI Security, Offensive Security· Added 30 Oct 2026, published 29 Oct 2026

endorlabs.comwriteup🛡️ Security

Endor Labs AI SAST Finds Two Apache Kafka Zero-Days: Unbounded Memory Allocation from Brokers to Kafka Streams | Endor Labs

Endor Labs AI SAST found three unbounded memory allocation flaws in Apache Kafka, fixed under CVE-2026-114349 (DefaultRecord decoder, a ~90-byte compressed batch that kills consumers, brokers and the log cleaner) and CVE-2026-111551 (ListDeserializer and Kafka Streams AssignmentInfo decoding). The post gives code, reproducers and payload bytes. Remediation: upgrade to 4.2.2, 4.3.2 or 4.4.0, set max.decompressed.message.bytes, restrict write and group ACLs, and alert on DeadThreadCount.

Apache KafkaKafka StreamsJava+1

CVE-2026-114349CVE-2026-111551denial of service+4

AppSec· Published and added 28 Oct 2026

securityweek.comarticle🛡️ Security

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Chrome 156 and Firefox 159 security updates fix over 200 vulnerabilities. Chrome 156 patches 52 flaws, four critical, including CVE-2026-118306, a FileSystem memory corruption bug that allows code execution outside the sandbox via a crafted HTML page. Firefox 159 fixes 167 flaws, 108 high severity, mostly use-after-free, plus Thunderbird and ESR releases. No in-the-wild exploitation is reported.

ChromeFirefoxThunderbird+1

CVE-2026-118306use-after-freesandbox escape

AppSec, other· Published and added 28 Oct 2026

securityweek.comarticle🛡️ Security

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

FoxIO disclosed three TLS flaws in the GoAhead embedded web server from EmbedThis, used on hundreds of millions of IoT, OT and network devices. CVE-2026-115881 (CVSS 9.1) leaves revoked client certificates accepted under mTLS with OpenSSL; CVE-2026-115884 (7.4) bypasses chain-length limits with LibreSSL; a third Mbed TLS bug (5.9, no CVE) weakens TLS 1.2 DHE. GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues, and FoxIO released PoC code and fingerprints.

GoAheadOpenSSLMbed TLS+2

CVE-2026-115881CVE-2026-115884FoxIO+4

Hardware & RF, AppSec· Published and added 28 Oct 2026

securityweek.comarticle🛡️ Security

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Four vulnerabilities in EPICS Base 7.0.10 and earlier, the control-system toolkit used at ITER and the Advanced Photon Source, were disclosed by CISA. CVE-2026-114595 (CVSS 9.8) is an integer overflow that could allow remote code execution, though only an out-of-bounds heap write and crash were demonstrated. All flaws sit in Channel Access and pvAccess handling (TCP 5064 and 5075), need no authentication, and are fixed in 7.0.11.

EPICSChannel AccesspvAccess+3

CVE-2026-114595CVE-2026-114596CVE-2026-114597+10

Hardware & RF, AppSec· Published and added 28 Oct 2026

arxiv.orgpaper🧠 AI

Data Scaling Laws in Stereo Matching: From In-domain Fitting to Cross-domain Generalization

This paper studies data scaling laws in stereo matching and releases XStereo, a realistic synthetic dataset of 200 thousand samples. In-domain training on five large datasets shows two regimes: a standard power law, then saturation, with a transition point roughly fixed for a given model. Cross-domain performance depends only weakly on source data scale, and distribution and coverage diversity reduce domain gaps more.

XStereoarXiv

research, training, multimodal· Added 30 Oct 2026, published 28 Oct 2026

aws.amazon.comarticle🛡️ Security

Introducing Route 53 Resolved IP Validation for AWS Network Firewall

Route 53 Resolved IP Validation for AWS Network Firewall, launched 21 October 2026 at no extra charge, has Route 53 Resolver share the IP addresses it returns per domain with Network Firewall, which checks each new outbound connection against them. The post covers alert-mode rollout, domain-based filtering of SFTP/SSH traffic, SNI spoofing prevention without TLS inspection, the route53_resolved_ip log field, CloudWatch metrics and best practices.

AWS Network FirewallAmazon Route 53 ResolverRoute 53 Resolver DNS Firewall+3

SNI spoofingRoute 53 Resolved IP ValidationDNS tunneling

Cloud & Infra, Blue Team & Detection· Added 28 Oct 2026, published 27 Oct 2026

cisa.govadvisory🛡️ Security

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA alert of 27 October 2026 adding two vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog on evidence of active exploitation: CVE-2026-48356, an unrestricted upload of a dangerous file type in Adobe Commerce and Magento, and CVE-2026-111497, an unchecked return value in Google Brotli. It restates BOD 26-04, which makes federal civilian agencies prioritise KEV flaws on exposed assets and check for prior compromise. No technical detail or IOCs are given.

Adobe CommerceMagentoBrotli

CVE-2026-48356CVE-2026-111497CISA KEV+2

AppSec, GRC· Added 29 Oct 2026, published 27 Oct 2026

arxiv.orgpaper🧠 AI

Can LLMs Uncover Hidden Physical Laws through Free Exploration?

LongChang is an automated framework that builds simulated worlds with altered physical laws, such as heavier objects falling more slowly, to test whether LLMs can find the law by free exploration. Explorer LLMs manipulate objects and build tools without tasks or hints, while separate LLM agents generate scenes, review tool designs and grade reports. Across 12 LLMs, GPT-6 Astra reached a 16.7% discovery rate and the other 11 scored 0%.

LLM

LongChangGPT-6 AstraarXiv

evals, research, agents· Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaper🧠 AI

Scaling Laws for Tool-Use Agents via Controllable Environment Synthesis

SynthAPI is a pipeline that generates synthetic tool-use environments with explicit control over diversity of tools, tasks and underlying databases. Across 458,752 tasks and 849 trained models of four sizes, the authors fit a scaling law predicting downstream agent generalization. At larger data budgets, scaling tool and database diversity beats adding more tasks, and higher complexity helps more. Agents trained this way beat prior synthetic-data baselines on four benchmarks.

LLM

SynthAPI

research, training, agents· Added 28 Oct 2026, published 27 Oct 2026

aws.amazon.comarticle🛡️ Security

Part 3 – Cybersecurity journeys: The work behind the work

Part 3 of the AWS Security Blog series on cybersecurity careers profiles three AWS staff: Brandon Caldwell (application security, empathy and communication), Kurt Heath (self-taught pen tester, cautious AI use) and Seth Jeacopello (code review, managing attention). It gives practical advice: practice on vulnerable machines and read the logs, build CTF and GitHub portfolios, and write clearly. It lists TryHackMe, Hack The Box, the OWASP Top 10, OWASP Cheat Sheet Series, Darknet Diaries and AWS Skill Builder.

TryHackMeHack The BoxAWS Skill Builder+1

Brandon CaldwellKurt HeathSeth Jeacopello+6

Learning, AppSec· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailworm is a set of 11 findings, published by Cyberdione Labs before patches, in Tailscale client 1.104.2 and headscale 0.29.5. Four of six high-severity bugs affect Tailscale SSH, where root-privileged forwarding safeguards can be bypassed, giving root on reachable servers and wormable spread at under a second per hop. Tailscale advises reviewing SSH policies and disabling forwarding until a patched client ships. No in-the-wild exploitation is reported.

TailscaleheadscaleSSH+2

TailwormCyberdione LabsMike Shaver+3

Offensive Security, AppSec· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

HPE Patches Dozens of Critical Flaws in Networking Products

HPE released patches for 72 vulnerabilities in the AOS-8 and AOS-10 wireless operating systems of its Aruba networking products, including 33 critical flaws. Eight max-severity bugs (CVE-2026-79844 to CVE-2026-79851) allow unauthenticated RCE, authentication bypass and arbitrary command execution. Fixes are in AOS 8.10.0.24, 8.13.3.1, 10.4.1.14, 10.7.2.7 and 10.8.1.2. HPE reports no exploitation in the wild and advises restricting management interfaces to a dedicated VLAN.

HPE Aruba NetworkingAOS-8AOS-10

CVE-2026-79844CVE-2026-79845CVE-2026-79846+5

Cloud & Infra· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

This SecurityWeek commentary covers the September 2026 Citrix NetScaler ADC and Gateway zero-days, exploited from mid-month and patched on 27 September as unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778. The author argues the fast response shows stronger defence. Cited evidence: Citrix disclosure time fell from about 40 days to 17 in 2026 after it set up a NetScaler CNA, and CISA made a rare Sunday KEV addition.

Citrix NetScaler

CVE-2026-88771CVE-2026-88772CVE-2026-88773+9

other, Threat Intel· Published and added 27 Oct 2026

aikido.devarticle🛡️ Security

How to patch PHP2Shell with free Aikido Images

Aikido Images are free patched PHP container images on public ECR (public.ecr.aws/aikido-dev/php) that backport the PHP2Shell fixes for CVE-2026-109618 and CVE-2026-109619 into release lines 5.5 to 8.5, except 8.0. Upstream fixed 8.2 to 8.5 in October 2026 and left 8.1 and older unpatched. The post shows docker pull and Dockerfile FROM changes, then rebuild, restart, session.upload_progress.enabled=0 and compromise checks.

PHPDockerAikido Security+1

CVE-2026-109618CVE-2026-109619PHP2Shell

DevSecOps, AppSec· Published and added 26 Oct 2026

cisa.govadvisory🛡️ Security

EPICS Base

CISA ICS advisory ICSA-26-300-01 (October 27, 2026) covers EPICS Base release 7.0.10 and earlier, with CVE-2026-114595 through CVE-2026-114598. Flaws include integer overflow, length parameter inconsistency and type confusion, allowing denial of service, memory corruption, information disclosure or remote code execution (CVSS v3.1 9.8). The fix is EPICS Base 7.0.11, with patches in epics-base and pvDataCPP pull requests.

EPICS BaseCVSS

CVE-2026-114595CVE-2026-114596CVE-2026-114597+5

AppSec· Added 29 Oct 2026, published 26 Oct 2026

arxiv.orgpaper🛡️ Security

Cheap AI-Assisted Reverse Engineering and What It Will Do

"Cheap AI-Assisted Reverse Engineering and What It Will Do" is an October 2026 arXiv paper (Computers and Society) arguing that generative AI strains the law of reverse engineering. AI systems can identify hardware components, extract firmware, decompile object code and clone apps, which removes the cost barrier that laws rely on. The authors map these practices onto trade secret, copyright, anti-circumvention, computer misuse and contract law, and sketch possible legal responses with their trade-offs.

Malware & RE, GRC, AI Security· Added 28 Oct 2026, published 26 Oct 2026

securityweek.comarticle🛡️ Security

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) are critical unauthenticated RCE flaws in the PHP engine, patched on 21 October 2026 in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Industrial vendors including Schneider Electric, Siemens, ABB, B&R, Johnson Controls, Belden, HMS Networks and Wibu-Systems have confirmed affected OT products, with fixed versions or mitigations listed. Rockwell Automation and Hitachi Energy were still assessing, and Moxa reported no impact.

PHPCloudflareDokuWiki+1

CVE-2026-109618CVE-2026-109619PHP2Shell+11

AppSec, Threat Intel· Published and added 26 Oct 2026

securityweek.comarticle🛡️ Security

PHP2Shell Exploitation Moves From Probes to Working Shells

PHP2Shell exploitation (CVE-2026-109618, CVE-2026-109619) reached working shells on 24 October 2026, when Perplexity researcher Adel Karimi's honeypots (PHP 8.4.26, Apache mod_php, single worker) logged 35 shells across three servers. Attackers used a four-stage HTTP chain: memory exhaustion, memory leak, then shell command execution, matching a public PoC. No second-stage payload was seen, and CISA had not added the flaws to KEV as of 26 October.

PHPApache

CVE-2026-109618CVE-2026-109619PHP2Shell+4

Threat Intel, AppSec· Published and added 26 Oct 2026

tailworm.comwriteup🛡️ Security

Tailworm – Tailscale Vulnerabilities

Tailworm is a security assessment report by Erica Windisch (Cyberdione Labs) on Tailscale v1.104.2 and headscale v0.29.5, tested 22-24 October 2026. It documents 11 findings: Tailscale SSH unix-socket forwarding that runs as root (bind, dial and TOCTOU races), conn25 app-connector egress bypass, gliderssh memory exhaustion, serve/funnel flaws and headscale DoS. It includes PoC references, mitigations and fix status as of 27 October 2026. The page is truncated, so the later sections were not read.

TailscaleheadscaleSSH+3

CVE-2025-14282Erica WindischCyberdione Labs+7

Offensive Security, Cloud & Infra, AppSec· Added 27 Oct 2026, published 25 Oct 2026

cisa.govadvisory🛡️ Security

CISA: Critical Vulnerabilities in PHP Require Immediate Patching

CISA alert on CVE-2026-109618 and CVE-2026-109619 ("php2shell"), unauthenticated remote code execution flaws affecting PHP installations serving web requests, including mod_php, PHP-FPM, php-cgi, FrankenPHP and LiteSpeed. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Updated 23 October 2026 with a Sigma rule, partner advisories (NSA, NCSC-UK, ASD ACSC, NCSC-NL, NCSC-NZ, Cyber Centre) and guidance to inventory PHP, patch internet-facing systems first, and watch for PHP workers spawning shells. No in-the-wild exploitation had been observed.

PHPApachePHP-FPM+3

CVE-2026-109618CVE-2026-109619PHP2Shell+2

AppSec, Blue Team & Detection· Added 24 Oct 2026

newsletter.semianalysis.comarticle🧠 AI

Amazon’s Trainium Takes a Strike at the Training King

SemiAnalysis reviews AWS Trainium3 and the new TorchNeuron native PyTorch backend after a few weeks of hands-on use. It reports TorchTitan Qwen3-32B results on Trainium2 (11,099 tokens/s eager at 23.89% MFU, 14,156 compiled at 30.47%), a 27-minute gpt-oss compile time, 89 of 96 FlexAttention cases passing, matmul comparisons with GB300 and B200, and a positive view of the Neuron Explorer profiler.

TrainiumTorchNeuronAWS Neuron+17

SemiAnalysisAmazonAWS+10

inference, training, ai-infra· Added 29 Oct 2026, published 23 Oct 2026

horizon3.aiadvisory🛡️ Security

CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available

PHP2Shell is the name for CVE-2026-109618 and CVE-2026-109619, critical unauthenticated RCE flaws in PHP core fixed on 21 October 2026 in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. The page explains the out-of-memory corruption and stale global state causes, mod_php and PHP-FPM exposure, interim mitigations, hunting guidance, exploitation reports from October 2026, and the 23 October CVE-2026-115560 upload-progress advisory. Horizon3 also announced a non-exploiting NodeZero check.

PHPPHP-FPMApache+3

CVE-2026-109618CVE-2026-109619CVE-2026-115560+5

AppSec, Blue Team & Detection· Added 29 Oct 2026, published 23 Oct 2026

endorlabs.comarticle🧠 AI

What is the AI-Native SDLC? AI SDLC, AI-DLC, and ADLC Explained | Endor Labs

The AI-native SDLC is a software lifecycle redesigned around AI and coding-agent participation, as opposed to the AI-assisted SDLC, which adds AI tools to unchanged stages. The Endor Labs guide separates AI-DLC (the AWS methodology), AI SDLC and the two meanings of ADLC (Agentic vs Agent Development Lifecycle). It also covers stage-by-stage changes and AppSec implications: AI-generated code flaws, dependency choice, reachability analysis and governing agent actions.

AWSstatic analysis

Endor LabsIBMAtlan+3

ai-policy, coding-agents· Published and added 23 Oct 2026

orca.securityarticle🛡️ Security

PHP2Shell: What This Week Tells Us About the Web We Built

PHP2Shell is the name for two unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS v4 9.2), in the PHP engine back to version 5.4. The post covers the leaked October 2026 embargo, AI-assisted exploit building by Calif and others, patch availability by PHP version, and a 72-hour and quarterly response plan covering inventory, patching, secret rotation and edge virtual patching. It ends with a short Orca product section.

PHPWordPressOrca Security

CVE-2026-109618CVE-2026-109619PHP2Shell+6

Blue Team & Detection, AppSec, GRC· Published and added 23 Oct 2026

decrypt.coarticle🛡️ Security

Ethereum Delays Glamsterdam Testnet Fork Over Gas Security Flaws

Ethereum developers postponed the Glamsterdam hard fork on the Hoodi testnet (due 26 October 2026) after auditor ChainSecurity reported that the gas changes in EIP-8037 and EIP-8038 break assumptions in existing contracts. Gas can be refilled after a failed call and repricing alters call costs, so failure paths that used to revert can now complete, undermining insufficient gas griefing protections. ChainSecurity found 13 real-world examples and is in responsible disclosure.

EthereumPrysm

GlamsterdamChainSecurityEIP-8037+6

Blockchain· Published and added 23 Oct 2026

securityweek.comarticle🛡️ Security

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian's October 2026 security bulletin lists 162 high and 14 critical third-party vulnerabilities across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software and Jira Service Management. SecurityWeek counts 75 unique CVEs, six critical, in Tomcat, Bouncy Castle, Netty and Apache SSHD. Atlassian rates them non-critical for its use, reports no exploitation, and the critical CVE-2026-65905 appears on the portal but not in the bulletin.

ConfluenceJiraBitbucket+3

CVE-2026-65637CVE-2026-65182CVE-2026-68525+6

AppSec, Supply Chain· Published and added 23 Oct 2026

huggingface.coarticle🧠 AI

Does Your Model Run on AWS Trainium? Look It Up

The torch-neuronx model support Space is a Hugging Face and AWS Neuron lookup that shows whether a Transformers model runs unmodified on AWS Trainium2. Each result lists core count, wall time and peak memory, plus the run.py script and a public NEFF compile cache. Tests generate 32 tokens on up to 16 cores. Results are in the aws-neuron/torch-neuronx-model-support Parquet dataset.

AWS Trainiumtorch-neuronxTorchNeuron+5

AWSQwen3

inference, ai-infra· Published and added 23 Oct 2026

x.comthread🛡️ Security

Daily Vibe Casting (@vibecastingapp) on X

Daily Vibe Casting thread of 24-hour tech news, with item 5/10 on Cloudflare's agent security audit skill. The skill works across models and agent harnesses, including free models, and outputs machine-readable reports. It calls for sandboxing, proof of real impact and independent checks. The thread also covers GitLab CVE-2026-110264 (CVSS 10.0, unauthenticated RCE), two AI-found PHP RCE flaws, and a Railway secret-theft warning.

CloudflareGitLabPHP

CVE-2026-110264RailwayWiz Research

AI Security, AppSec· Added 24 Oct 2026, published 22 Oct 2026

horizon3.aiarticle🛡️ Security

PHP2Shell Exposure Depends on More Than Whether You Use PHP

Horizon3.ai post on assessing exposure to PHP2Shell (CVE-2026-109618, CVE-2026-109619), two memory-handling flaws in PHP. It says affected PHP may be bundled in third-party products, containers or managed hosting, and that finding it shows a remediation need, not proven exploitability. It lists questions to ask hosting providers and says Horizon3.ai has validated exploitation under specific preconditions that are still being characterized.

PHP

CVE-2026-109618CVE-2026-109619PHP2Shell

AppSec, Offensive Security· Added 29 Oct 2026, published 22 Oct 2026

unit42.paloaltonetworks.comarticle🛡️ Security

The Current Landscape of OAuth Attacks

Unit 42 survey of OAuth attacks that steal tokens after MFA, so access survives password resets. It covers account hijacking (device authorization and authorization code misuse), permission hijacking (vague or impersonating app names), and malicious redirects, including the error-triggered redirect campaign Microsoft documented in March 2026. It also describes COSF and OAuth-as-a-service flaws, PhaaS and LLM evasion trends, and defenses such as admin-only consent and redirect_uri audits.

OAuthMicrosoft Entra IDCloudflare Workers+2

Cross-User OAuth Session FixationCross-Tenant Client ID ConfusionCross-Connector OAuth Account Takeover+7

Identity & Access, Threat Intel, Blue Team & Detection· Added 30 Oct 2026, published 22 Oct 2026

decrypt.coarticle🧠 AI

What Is a Neocloud? The GPU Clouds Powering the AI Boom

Decrypt explainer on neoclouds, specialist providers such as CoreWeave and Nebius that rent Nvidia GPU clusters for AI training and inference. It covers the chips, power and debt model, Bitcoin miners turned AI hosts, and customers including Microsoft, AWS, Google and Anthropic. It cites Gartner's 14 October 2026 forecast that over 80% of neoclouds will stop operating independently by 2030.

EthereumBitcoin

CoreWeaveNebiusLambda+22

ai-infra, ai-policy· Published and added 22 Oct 2026

tldrsec.comarticle🛡️ Security

[tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner

tl;dr sec #351 is a weekly security newsletter. Clint Gibler describes working with OpenAI, Calif, Wiz and the PHP maintainers on the PHP2Shell unauthenticated RCE disclosure, which affects 13 years of PHP. It also covers Datadog's pathrunner AWS IAM escalation framework, Trail of Bits' patching-bugs and regression-hunt Codex plugins, XBOW finding de-duplication, backdoored open-weight models, and CREBench.

PHPAWS IAMCodex+3

PHP2ShellPatch the PlanetCalif+10

AppSec, AI Security, Cloud & Infra· Added 30 Oct 2026, published 22 Oct 2026

github.comrepo🧠 AI

Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm off-key

OnKey is a free, MIT-licensed singing trainer for Apple Silicon Macs. After a song ends in Spotify, Apple Music or browser YouTube, it separates the lead vocal with UVR's MDX-Net Karaoke 2, tracks pitch with CREPE and turns it into syllable-level notes with the GAME model. On later plays it scrolls the notes, draws the user's live pitch and scores each line. Analysis runs on-device, and the repo explains the build steps and network requests.

macOSRustNode.js+2

OnKeyCREPEGAME+9

multimodal, inference· Added 24 Oct 2026, published 22 Oct 2026

securityweek.comarticle🛡️ Security

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

SecurityWeek roundup of responses to PHP2Shell, two critical unauthenticated RCE flaws (CVE-2026-109618, CVE-2026-109619) fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on 21 October 2026. It covers the exploitation timeline (first attempt 17 October), vendor exposure checks, Red Hat's lower 8.1 score against NVD's 9.8, detections from Cisco Talos, CrowdStrike and Corelight, and government alerts.

PHPAWSGoogle Cloud+3

CVE-2026-109618CVE-2026-109619PHP2Shell+6

Blue Team & Detection, AppSec· Published and added 22 Oct 2026

x.comthread🛡️ Security

Paul Dragoonis (@dr4goonis) on X

Social post summarising emergency patches for Node.js (4 high CVEs), PHP (2 critical) and nginx (3 critical). Node.js flaws include a Brotli decoder out-of-bounds write, a DNS truncation bug and two TLS hostname-verification bypasses. PHP has use-after-free and heap corruption bugs, and nginx has alias-rewrite and map-regex heap overflows plus an SSI-AIO use-after-free. It lists the fixed versions for each product.

Node.jsPHPnginx

CVE-2026-111497CVE-2026-105482CVE-2026-105483+8

AppSec· Added 23 Oct 2026, published 22 Oct 2026

securityweek.comarticle🛡️ Security

PHP2Shell Exploitation Started Days Before Patches

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of critical PHP remote code execution flaws. Amazon saw the first exploitation on 17 October 2026, four days before patches on 21 October, and Cloudflare logged millions of attempts after disclosure. Censys, VulnCheck and VirusTotal counted over 1 million unpatched PHP hosts, and CISA urged updating to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35.

PHPCloudflareVirusTotal+1

CVE-2026-109618CVE-2026-109619PHP2Shell+4

Threat Intel, AppSec· Published and added 22 Oct 2026

latent.spacearticle🛡️ Security

[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months

AINews issue of 20-21 October 2026 whose top story reconstructs PHP2Shell, two PHP-engine memory-corruption flaws (CVE-2026-109618 and CVE-2026-109619) with reported pre-auth RCE against WordPress, Drupal and Joomla. It covers the two-month coordinated response, separate discovery by Calif/OpenAI (GPT-5.6 Sol) and Wiz (Gemini 4 Argon), Cloudflare's WAF stopgap and NSA guidance. It lists open gaps: fixed versions, leak details, exploitation versus scanning.

PHPWordPressDrupal+3

CVE-2026-109618CVE-2026-109619PHP2Shell+12

AppSec, AI Security· Added 23 Oct 2026, published 22 Oct 2026

metr.orgwriteup🛡️ Security

Red-Teaming OpenAI's Internal Agent Monitoring Systems

METR and Redwood Research summarize a three-week pilot red-team (21 July to 11 August 2026) of OpenAI's internal asynchronous misalignment monitoring system. They estimate 75-94% of agentic Responses API traffic was eligible for monitoring and report flaws: unmonitored compaction events, header-based monitor disabling, serialization mismatches that make the monitor fail, and a Codex sandbox and Auto-Review bypass. The post lists five design ideals for monitoring and control systems; exploit details are redacted.

OpenAICodexGPT-5.5+1

METRRedwood ResearchAuto-Review+3

AI Security· Added 29 Oct 2026, published 22 Oct 2026

aws.amazon.comarticle🛡️ Security

Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

AWS Security Blog guide to mitigating the PHP2Shell unauthenticated RCE flaws (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 9.2) with AWS WAFv2 rules. It covers rules for the PHP_SESSION_UPLOAD_PROGRESS trigger, blocking multipart/form-data, body size caps and rate limits, plus body inspection limits. It lists PHP fixes (8.5.12, 8.4.27, 8.3.36, 8.2.35) and server settings, and stresses WAF only reduces exposure.

AWS WAFPHPAWS+1

CVE-2026-109618CVE-2026-109619PHP2Shell+4

Cloud & Infra, Blue Team & Detection, AppSec· Published and added 22 Oct 2026

aws.amazon.comadvisory🛡️ Security

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

AWS bulletin 2026-143-AWS covers CVE-2026-109618 and CVE-2026-109619, critical PHP web runtime flaws that let an unauthenticated remote caller run code, read process data or cause denial of service. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; PHP 5.4 to 8.1 get no fix. It gives status for WorkMail, Elastic Beanstalk, Amazon Linux and Lightsail, plus AWS WAF rules, including a custom "PHP2Shell" rule matching PHP_SESSION_UPLOAD_PROGRESS and PHPSESSID.

PHPAWSAWS WAF+3

CVE-2026-109618CVE-2026-109619PHP2Shell+1

AppSec, Cloud & Infra· Added 22 Oct 2026, published 21 Oct 2026

socket.devarticle🛡️ Security

PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches

The PHP Foundation's October 21, 2026 postmortem says Chainguard broke an embargo by publishing patched PHP container images over six hours before the coordinated release of fixes for CVE-2026-109618 and CVE-2026-109619, two critical RCE flaws. The piece covers the leaked CVE IDs, Calif's accidentally published exploit video, Chainguard CEO Dan Lorenc's defence citing exploitation in the wild, and the 2024 origin of the memory management bug.

PHPDockerCloudflare+2

CVE-2026-109618CVE-2026-109619Calif+8

Supply Chain, AppSec, other· Published and added 21 Oct 2026

simonwillison.netarticle🛡️ Security

Today's PHP Security Release, and How We're Strengthening PHP Security

Simon Willison's link post on the 21 October 2026 PHP security release, which fixes two remote code execution flaws across the PHP 8.x line. The CVE IDs leaked on 20 October with a wrong CVSS of 10.0 (actual 9.2), and Calif accidentally published a proof-of-concept video. It also gives Wiz Research's timeline, with unauthenticated RCE confirmed against Drupal and WordPress in August 2026.

PHPWordPressCVSS+1

Wiz ResearchCalifPHP Foundation+3

AppSec, Threat Intel· Published and added 21 Oct 2026

protos.comarticle🛡️ Security

Remotely exploitable PHP bug found on 70% of world’s websites

PHP2Shell is a pair of unauthenticated remote code execution flaws in PHP, CVE-2026-109618 and CVE-2026-109619, found by Calif using OpenAI's GPT-5.6 Sol during an OpenAI-funded audit. Fixes ship in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with backports for 7.4-8.1 rolling out, while PHP 7 and 5 sites stay unpatched. Wiz confirmed the flaws; Cloudflare applied a stopgap and Finnish and Dutch government sites went offline.

PHPCloudflareOpenAI+1

CVE-2026-109618CVE-2026-109619PHP2Shell+5

AppSec, AI Security, Threat Intel· Published and added 21 Oct 2026

aws.amazon.comarticle🛡️ Security

Best practices for integrating IAM Roles Anywhere with your PKI

Best practices for integrating AWS IAM Roles Anywhere with an external PKI so non-AWS workloads get temporary credentials via X.509 certificates. Covers trust anchor placement, certificate attributes (CN, issuer, SAN) in trust policy conditions, short-lived versus just-in-time certificates, and private key protection with PKCS #11, TPM 2.0 and OS certificate stores. Includes credential helper modes (serve, update), expiry monitoring, blue/green trust anchor rotation and a sample CloudFormation template.

AWS IAM Roles AnywhereAWS IAMAWS Private CA+3

X.509trust anchorPKCS #11+5

Identity & Access, Cloud & Infra· Published and added 21 Oct 2026

securityweek.comarticle🛡️ Security

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

PHP2Shell is a pair of critical PHP core flaws, CVE-2026-109618 (out-of-memory corruption) and CVE-2026-109619 (stale global state), both CVSS 9.2 and giving unauthenticated RCE, confirmed on Apache with mod_php. Fixes shipped in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with backports for 7.4 to 8.1. Exploitation attempts were reported by watchTowr, Hadrian, Patchstack, Cloudflare and Vega after a leak moved disclosure up from 22 October 2026 to one day earlier.

PHPApachemod_php+3

CVE-2026-109618CVE-2026-109619PHP2Shell+9

AppSec, Threat Intel· Published and added 21 Oct 2026

huggingface.cowriteup🧠 AI

Profiling TorchNeuron (Part 1): System-level profiling on AWS Trainium.

Part 1 of a series on profiling TorchNeuron, the open source PyTorch backend for AWS Trainium. It shows how to configure torch.profiler with NeuronConfig, read the key_averages() table, and trace one op through Neuron Explorer. Three RMSNorm variants are compared: naive eager (2.355 ms device time), torch.rms_norm (403 μs) and torch.compile (375 μs).

PyTorchTorchNeuronAWS Trainium+8

AmazonHugging Face

inference, ai-infra· Published and added 21 Oct 2026

endorlabs.comadvisory🛡️ Security

PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) | Endor Labs

PHP2Shell is the name for two critical PHP core memory-safety flaws, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated remote code execution. Fixes ship in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Wiz researchers demonstrated RCE against WordPress, Drupal and Joomla, and Apache with mod_php is the highest risk. The post covers inventory, container rebuilds, Cloudflare WAF rules and temporary exposure reduction.

PHPWordPressDrupal+3

CVE-2026-109618CVE-2026-109619PHP2Shell+4

AppSec, DevSecOps· Published and added 21 Oct 2026

thephp.foundationarticle🛡️ Security

Today's PHP security release, and how we're strengthening security

The PHP Foundation explains the 21 October 2026 release of PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, which fix two critical unauthenticated RCE flaws in memory management and error handling, including an OOM problem behind CVE-2026-109618. It covers the 2024 Quarkslab audit, the stalled fix, the August 2026 reports from Calif, OpenAI and Wiz, and the embargo leaks (CVE IDs, a Calif video, Chainguard images). It also lists new security team structure and AI-assisted triage.

PHPChainguardOpenAI+2

CVE-2026-109618CalifPatch the Planet+8

AppSec, other· Added 22 Oct 2026, published 21 Oct 2026

decrypt.coarticle🛡️ Security

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Decrypt reports on CVE-2026-109618 and CVE-2026-109619, two PHP flaws rated CVSSv4 9.2 that allow unauthenticated remote code execution. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 shipped on 21 October 2026 after an early leak and Cloudflare-observed attacks. The article covers the memory-handling root causes, mod_php and upload-progress exposure, government site shutdowns, affected version range (PHP 5.4 and later per Sansec), and patch guidance.

PHPCloudflareWordPress+1

CVE-2026-109618CVE-2026-109619PHP Foundation+7

AppSec, Threat Intel· Published and added 21 Oct 2026

socket.devarticle🛡️ Security

PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline

PHP2Shell is a pair of memory-safety flaws in the PHP engine, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), fixed on 21 October 2026 in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Unauthenticated requests can reach code execution, most readily through Apache mod_php, and Cloudflare reports active attack traffic. The post covers W3Techs data showing about 48.5% of PHP sites on end-of-life branches, the leak timeline, and the need to patch the runtime itself.

PHPCloudflareWordPress+2

CVE-2026-109618CVE-2026-109619PHP2Shell+5

AppSec, Threat Intel· Published and added 21 Oct 2026

blog.talosintelligence.comadvisory🛡️ Security

Two critical RCEs in PHP core

Cisco Talos advisory on "php2shell", two unauthenticated RCE flaws in PHP core, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), affecting every build since PHP 5.4. One flaw is an out-of-memory handling bug leaving request data partly initialized; the other reuses stale state after free. PHP 8.1 and older get no patch (about 50% of PHP systems). Includes ini-level mitigations and Snort SIDs 67359 and 67360. No exploitation seen as of 21 October 2026.

PHPWordPressCVSS

CVE-2026-109618CVE-2026-109619php2shell+2

AppSec, Blue Team & Detection· Published and added 21 Oct 2026

securityweek.comarticle🛡️ Security

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

SecurityWeek summarises Rapid7's Q3 2026 threat landscape report. High-severity vulnerabilities were exploited within an average of three days of disclosure, and 71% within seven days. The Gentlemen (342 claimed incidents) and Qilin (339) led ransomware, and the US took 60% of attacks. AI was an operational component in only 8% of tracked incidents. The report also covers 15 APT groups, a new DPRK Linux toolkit named 'ted', and access-broker listings.

HAProxySSHcURL+1

Rapid7The GentlemenQilin+13

Threat Intel· Published and added 21 Oct 2026

watchtowr.comadvisory🛡️ Security

PHP Remote Code Execution ("PHP2Shell" CVE-2026-109618 & CVE-2026-109619)

PHP2Shell is the name for CVE-2026-109618 (out-of-memory corruption) and CVE-2026-109619 (stale global state), two unauthenticated PHP remote code execution flaws rated CVSS 4.0 9.2. Details leaked before the 21 October 2026 patch release, and watchTowr's honeypots saw exploitation. The page lists fixed versions (8.5.12, 8.4.27, 8.3.36, 8.2.35), states that .ini mitigations do not work, gives a timeline, and describes compromise checks.

PHPApacheFrankenPHP+2

CVE-2026-109618CVE-2026-109619PHP2Shell+3

AppSec, Threat Intel· Added 28 Oct 2026, published 21 Oct 2026

blog.cloudflare.comarticle🛡️ Security

Cloudflare deploys protections against php2shell vulnerability

Cloudflare describes its WAF protections for php2shell (CVE-2026-109618 and CVE-2026-109619), two PHP runtime memory-handling flaws affecting PHP 5.4 and later that can cause denial of service, remote code execution and data exposure. Rules shipped 21 October 2026, about 9 hours before disclosure, using a new "full transaction detection" that matches request and origin response together. It lists ruleset IDs and says patching PHP is still required.

PHPCloudflareWordPress

CVE-2026-109618CVE-2026-109619PHP2Shell+2

Blue Team & Detection, AppSec· Added 22 Oct 2026, published 21 Oct 2026

orca.securityadvisory🛡️ Security

Critical PHP “PHP2Shell” RCE Vulnerabilities Allow Unauthenticated Remote Code Execution (CVSS 9.2)

PHP2Shell is the informal name for CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), unauthenticated remote code execution flaws in the PHP core runtime. Patches for branches 8.2 to 8.5 were scheduled for 21 October at 14:00 UTC, while PHP 8.1 and older get no fix; about 884,000 internet-facing hosts run those versions. watchTowr reproduced CVE-2026-109618, no public PoC existed at writing, and Sansec expects mass exploitation within 15 minutes of release.

PHP

CVE-2026-109618CVE-2026-109619PHP2Shell+4

AppSec· Published and added 21 Oct 2026

securityweek.comarticle🛡️ Security

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

Chrome 156 reached the stable channel with fixes for 353 vulnerabilities, including six critical and 61 high-severity flaws. Memory safety dominates: 163 memory corruption, 125 use-after-free and 17 out-of-bounds read bugs. Google reports no in-the-wild exploitation. 285 bugs earned no bounty, including those found by Anthropic's Xinyang Ge with Claude and by OpenAI Codex Security. Builds are 156.0.8078.47/.48.

Chrome

Xinyang GeQuyen SonSite Isolation+4

AppSec· Published and added 21 Oct 2026

github.comrepo🛡️ Security

eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

php2shell is the name given to two critical pre-auth remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, in PHP core's session upload progress handler (php_session_rfc1867_callback), where zend_hash_update frees live zval pointers that are later reclaimed and redirected into zend_call_function to run zif_system. This repository ships poc_109618.py, a fully automated four-stage HTTP exploit that leaks ASLR offsets via Set-Cookie headers against php:8.4.26-apache on Debian Bookworm, along with a root-cause C source patch, mitigation scripts to disable session.upload_progress, and WAF/ModSecurity/Lighttpd/Apache rules plus detection guidance for anomalous PHP worker child processes. Confirmed PHP versions include 8.4.4 and 8.2.34, with EOL branches (5.x, 7.x, 8.0, 8.1) left without official vendor patches.

PHPDockerCloudflare+1

CVE-2026-109618CVE-2026-109619PHP2Shell+6

Offensive Security, AppSec, Blue Team & Detection· Added 23 Oct 2026, published 21 Oct 2026

securityweek.comarticle🛡️ Security

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

PHP2Shell is the name given to two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 each), that could allow unauthenticated remote code execution. Details leaked before PHP's planned patch release on 21 October 2026 at 14:00 UTC. Reports say all versions from PHP 5 onward are affected and one flaw may be a use-after-free; watchTowr reproduced CVE-2026-109618, and Sansec expects mass exploitation within 15 minutes of the patch.

PHPCVSS

CVE-2026-109618CVE-2026-109619PHP2Shell+4

AppSec, Threat Intel· Published and added 21 Oct 2026

alterauth.comtool🧠 AI

Launch HN: Alter (YC S25) – Access control for multi-user agents

Alter is a privileged access management layer for AI agents (YC S25). It stores credentials in a vault, injects them per request through a proxy, gives each agent its own identity and scoped grants, and logs every call to a tamper-evident audit trail. One SDK call covers storage, refresh, policy and audit for 140 API providers, with LangChain, MCP and AWS integrations. Policy is default-deny down to the parameter, with human approval for risky calls.

Model Context ProtocolLangChainAWS+3

AlterY Combinator

ai-infra, agents· Added 22 Oct 2026, published 21 Oct 2026

aikido.devadvisory🛡️ Security

Critical vulnerabilities in PHP (PHP2SHELL)

PHP2SHELL is Aikido Security's advance notice of two critical remote code execution flaws in PHP itself, CVE-2026-109618 and CVE-2026-109619, both CVSS v4.0 9.2, with all versions treated as affected. The PHP security team will release fixes at 14:00 UTC on 21 October 2026, a day early after details leaked on 20 October. The post withholds exploitation details and workarounds.

PHPCVSS

CVE-2026-109618CVE-2026-109619PHP2SHELL+1

AppSec· Published and added 21 Oct 2026

securitylabs.datadoghq.comwriteup🛡️ Security

PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation

PHP2Shell is Datadog Security Labs' analysis of two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), disclosed 21 October 2026. It walks through a reproduced exploit on PHP 8.5.11 (heap grooming, a fake array, and a destructor calling system()) and the stale-state use-after-free. It lists fixed versions (8.2.35, 8.3.36, 8.4.27, 8.5.12), partial mitigations, and detection signals across requests, error logs and shell child processes.

PHPApacheCVSS+1

CVE-2026-109618CVE-2026-109619PHP2Shell+5

AppSec, Blue Team & Detection, Offensive Security· Added 29 Oct 2026, published 21 Oct 2026

watchtowr.comadvisory🛡️ Security

Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)

PHP2Shell is the name for CVE-2026-109618 and CVE-2026-109619, two unauthenticated remote code execution flaws in PHP, both CVSS v4.0 9.2. One stems from out-of-memory corruption during request setup, the other from stale global state reused by the next request. watchTowr reports exploitation since 21 October 2026, lists fixed releases (8.5.12, 8.4.27, 8.3.36, 8.2.35) and says PHP 5 is also affected. PHP says no configuration change fully mitigates.

PHPApacheCVSS

CVE-2026-109618CVE-2026-109619PHP2Shell+3

AppSec, Threat Intel· Added 30 Oct 2026, published 20 Oct 2026

arxiv.orgpaper🧠 AI

OptScientist: Automated Discovery of Optimization Laws

OptScientist is a framework that discovers compact symbolic optimization laws from data. It pairs a model that infers symbolic optimization problems with an LLM agentic system that uses literature priors, proposes candidate laws, abstracts mechanisms and suggests new data to collect. On OptFeynman, a new benchmark of 99 physics-derived problems, it recovers ground-truth laws for over 80%. It is also tested on human risky choice and central-bank monetary policy.

LLM

OptScientistOptFeynmanarXiv

research, agents, evals· Added 22 Oct 2026, published 20 Oct 2026

securitylabs.datadoghq.comtool🛡️ Security

Datadog pathrunner: AWS IAM privilege escalation framework

pathrunner is a modular offensive framework from Datadog Security Labs that automates exploitation of the AWS IAM privilege escalation paths catalogued in pathfinding.cloud and deployed in Pathfinding Labs. It has over 80 exploit modules (as of October 2026), identity import and switching, multiple payloads per module, and attacker infrastructure deployment with a credential listener. A workspace report lists created resources and expected CloudTrail events for defenders.

AWSAWS IAMAWS Bedrock

pathrunnerpathfinding.cloudPathfinding Labs+2

Cloud & Infra, Offensive Security, Blue Team & Detection· Added 23 Oct 2026, published 20 Oct 2026

x.comthread🛡️ Security

DFIR Radar (@DFIR_Radar) on X

DFIR_Radar weekly detection engineering digest covering 23 new and 19 updated rules across 6 GitHub repositories. It lists KQL rules for Azure Key Vault secret retrieval, MCP client User-Agent bulk operations and local Azure token theft, AWS CloudTrail analytics, Sigma rules for firewall and ETW tampering (decimal 17 vs hex 0x11), updated LOLDrivers hashes, and Sublime email rules for OAuth consent phishing and fake IRS W-9 PDFs.

KQLSigmaMicrosoft Sentinel+3

BYOVDCisco AI Defensebenscha/KQLAdvancedHunting+7

Blue Team & Detection, Cloud & Infra, AI Security· Added 20 Oct 2026, published 19 Oct 2026

securityweek.comarticle🛡️ Security

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Drupal patched five vulnerabilities, including two critical RCE flaws: CVE-2026-108099 in the Entity List module and CVE-2026-108097 in core Field UI. Neither is exploitable alone, but contributed modules give exploit paths, at least one without authentication. Fixes are in Entity List 3.0.10 and Drupal 11.4.10, 11.3.19 and 10.6.19; uninstalling Field UI mitigates the second. XSS bugs in Link, Navigation and the Gin theme were also fixed. No in-the-wild exploitation is reported.

DrupalDrupal Field UIEntity List+1

CVE-2026-108099CVE-2026-108097CVE-2026-108515+1

AppSec· Published and added 19 Oct 2026

wiz.iowriteup🛡️ Security

Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack

Wiz CIRT write-up of an AI agent-run intrusion against a multi-cloud organization (GCP, AWS, Kubernetes, CI/CD, GitOps, identity provider). It lists traits of AI-driven attacks: machine-speed tempo, credential chaining, pentest/probe naming, numeric task IDs and commented code. Initial access was a Java RCE in an exposed Kafka UI. It closes with detection and response advice: unified logs, workload visibility and trust isolation.

WizKubernetesAWS+2

Wiz CIRTRed Agentcredential chaining+6

Threat Intel, Blue Team & Detection, Cloud & Infra, AI Security· Published and added 19 Oct 2026

huggingface.coarticle🧠 AI

TorchNeuron: running HF models on AWS Trainium is easier than ever

TorchNeuron is an AWS PyTorch plugin that exposes Trainium as a native "neuron" device with eager mode, torch.compile, DTensor and FSDP2, entering public beta on 20 October 2026 (pip install torch-neuronx). The post shows Transformers text generation with tensor parallelism, TRL SFT of Qwen3-8B on 32 NeuronCores (TP 4 x FSDP 8), and Diffusers TP inference. It says 89% of the top 100 text-generation architectures work, versus 46% with Optimum Neuron v0.4.5.

TorchNeuronAWS TrainiumPyTorch+12

AmazonQwen3.8-27BQwen3+1

inference, training· Published and added 19 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Plex2Shell is a chain of four Plex Media Server flaws (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) that a researcher says ends in unauthenticated RCE on servers older than 1.43.3.10861. A write-up and PoC were published on 16 October 2026. CISA advisory VA-26-266-01 scores the individual CVEs 4.3 to 7.2, and they are not in CISA KEV. The post advises updating, avoiding exposure of port 32400, and checking for unknown child processes and new files in the Codecs folder.

Plex Media ServerDocker

CVE-2026-96652CVE-2026-96654CVE-2026-96655+6

AppSec, Offensive Security· Added 19 Oct 2026, published 18 Oct 2026

x.comthread🧠 AI

Master the captain (@mollicksoif9) on X

A social post reporting that Reflection AI released the full weights of Beam, a 501B-parameter mixture-of-experts agentic coding model (23B active, 1M-token context), on Hugging Face under Apache 2.0. It claims RL training that penalizes wasted tokens gives roughly 3-4x less inference compute than GLM-5.2, and 80.9 on SWE-bench Verified. Launch support is listed for AWS SageMaker, vLLM and SGLang. The post notes the token-efficiency claims still need independent confirmation and that self-hosting needs about 500GB of GPU memory at 8-bit.

Mixture of ExpertsHugging FacevLLM+3

Reflection AIBeamGLM-5.2+6

models, coding-agents, training· Added 18 Oct 2026, published 17 Oct 2026

jfrog.comarticle🛡️ Security

Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown

Interview with former SolarWinds CISO Tim Brown, held at JFrog swampUP 2026, on the 2020 Sunburst build supply chain attack. He recounts the Mandiant notification, discovering tainted Orion builds from February to June that reached 18,000 customers, and the legal-led incident response. He also covers the SEC Wells Notice against him personally, which was later dismissed with prejudice. He describes the rebuilt pipeline: the build system moved to AWS and defined in code, an assume-breach stance, and three separated builds (development with about 400 people with access, staging 36, production 2). He closes with comments on non-human and agentic AI identities and on helping CISOs understand build-pipeline risk.

SolarWinds OrionAWS

SunburstSolarWindsTim Brown+3

Supply Chain, DevSecOps, GRC· Added 18 Oct 2026, published 16 Oct 2026

coindesk.comarticle🧠 AI

Big Tech's AI auditors will only see what they're shown

Opinion column by Samuel Vance-Law (Decentralization Research Center) arguing that the White House AI accord signed by Nvidia, OpenAI, Anthropic, Google, Meta and xAI leaves audit independence unaddressed: companies pick their own auditors and decide what those auditors see, with no penalties. It draws on the Enron/Arthur Andersen and Sarbanes-Oxley precedent, a Stanford/Harvard/Brown scoring of the 2023 voluntary commitments (53% average), and METR's limited-access pre-release test of OpenAI's o3. It points to DeepMind's August double-blind evaluation on sealed hardware, run with Singapore's AI Safety Institute, as proof that auditors can now choose their tests without taking a copy of the model. It recommends auditor-chosen tests, public disclosure of auditor identities and audit scope, and an outside overseer of the auditors.

NVIDIAOpenAIAnthropic+19

ai-policy, evals, ai-safety· Published and added 16 Oct 2026

securityweek.comarticle🛡️ Security

F5, Juniper Networks Patch Critical Vulnerabilities

SecurityWeek reports F5 fixed 11 NGINX vulnerabilities. Three are critical: CVE-2026-15176 and CVE-2026-93479 are unauthenticated buffer overflows via crafted HTTP requests, and CVE-2026-97205 is memory corruption. All three can lead to RCE if ASLR is disabled or bypassed. Juniper Networks published 17 advisories covering over 150 flaws in Junos OS and Junos OS Evolved, plus four in Cloud-Native Router. About two dozen are critical, with root code execution, device takeover, kernel panic and an off-by-one buffer overflow. Neither vendor reports exploitation in the wild.

nginxJunos OSJunos OS Evolved+1

CVE-2026-15176CVE-2026-93479CVE-2026-97205+2

AppSec, Cloud & Infra· Published and added 16 Oct 2026

arxiv.orgpaper🧠 AI

The importance of tensor handling and implementation of physics-informed DeepONets

Proposes a modified Physics-informed DeepONet (PI-DeepONet) architecture that removes redundancy in how the Branch network processes input functions across collocation points. It is mathematically equivalent to the original but uses smaller input tensors and fewer Branch evaluations. The authors derive training-time scaling laws, then test on 1D, 2D and 3D linear advection problems. Accuracy matches the original, the maximum speed-up is 3.75× in 2D, and a 3D model trains on an NVIDIA A100 only with the new formulation, because the original runs out of memory.

PI-DeepONetDeepONetPINN+1

NVIDIAarXiv

research· Added 17 Oct 2026, published 15 Oct 2026

aws.amazon.comarticle🛡️ Security

AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs

AWS reports results for its autonomous pentesting agent, AWS Security Agent (now part of AWS Continuum), on an internal CTF-style benchmark of 37 recent 2025–2026 CVEs. Each CVE ran as a live docker-compose target with a hidden flag, and the agent started from an endpoint and a one-line hint with runtime CVE lookup disabled. It captured 35 flags, 33 (89.2%) through the intended vulnerability after an audit against canonical PoCs. The post describes the 7-stage pipeline (crawler, specialist agents, validator, exploitation agent, flag check, audit), three exploit walkthroughs (CMS upload-to-admin chain, AI workflow builder RCE, tRPC full-read SSRF), the two audit reclassifications caused by benchmark bugs, and two misses where the agent took the target down. It also argues that saturated public benchmarks like CVE-Bench and XBOW are contaminated.

AWS Security AgentAWSDocker+2

Opus 5CVEBenchSSRF+4

AI Security, Offensive Security, AppSec· Published and added 15 Oct 2026

tldrsec.comarticle🛡️ Security

[tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev

tl;dr sec issue #350 is a weekly security newsletter digest. It covers XBOW's six-day Chrome full-chain exploit built with GPT-5.6 Sol, Semgrep's IDOR benchmark metrics, the EntraGoat vulnerable Entra ID lab, Zenity's AWS Bedrock AgentCore IMDS credential theft, Cisco Talos's CAIRN hunting toolkit for AI-integrated malware, the REA reverse-engineering MCP, runZero's sshamble, and a Copilot for Word AI worm.

XBOWChromeMicrosoft Entra ID+3

EntraGoatAgentCorruptionCAIRN+11

AI Security, Offensive Security, Cloud & Infra· Added 30 Oct 2026, published 15 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Structural Cryptanalysis of the Eevee AEAD Family

ePrint paper cryptanalysing Eevee (Umbreon, Jolteon, Espeon), forkcipher-based AEAD modes proposed at CCS 2023 for IoT-to-cloud computation. It gives a two-encryption AD-free prefix distinguisher, a four-encryption nonce-misuse distinguisher, a deterministic AD-only forgery, and nonce-respecting forgeries on Jolteon and Espeon (fresh one-block forgery reusing the tag; arbitrary AD substitution). It traces these to proof flaws (online-prefix consistency, domain separation, checksum freshness), derives design requirements, and concludes the failures are in the mode design, not the C implementation.

EeveeUmbreonJolteon+2

other· Published and added 15 Oct 2026

aws.amazon.comarticle🛡️ Security

Penetration testing every deployment with AWS Continuum

Explains how to add AWS Continuum for penetration testing (formerly AWS Security Agent) as a post-deployment gate in CI/CD. Each run is scoped to the commit range since the last passing gate, and it can block promotion to production at a chosen severity threshold. It covers OIDC federation to a least-privilege IAM role, a GitHub Actions worked example, staged report-only rollout, and pitfalls: the baseline advances on passing report-only runs, fail-on-infrastructure-error defaults to fail-open, GitLab pipeline variables can override the committed threshold, and runner credentials need protecting.

AWS ContinuumGitHub ActionsGitLab+3

DevSecOps, Offensive Security, AI Security· Published and added 14 Oct 2026

x.comthread🛡️ Security

Ned Peterson (@NedPeterson99) on X

Social post summarizing a Sola Security study (Leon Goldberg, Gal Engelberg). An AI agent re-scored 9,967 high-severity findings from two commercial cloud security platforms across eight production environments and changed severity on 75.1% (58.5% downgraded, 16.6% upgraded). The cause is that 599 vendor rules each carry one fixed severity regardless of environment, and 49% of verdicts needed context beyond the flagged resource. Caveats: 92% of findings were AWS, and the study did not test whether the new severities predict real exploitation.

AWS

Sola SecurityLeon GoldbergGal Engelberg+1

Cloud & Infra, AI Security· Added 15 Oct 2026, published 14 Oct 2026

securityweek.comarticle🛡️ Security

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

Roundup of ICS Patch Tuesday advisories. Siemens published 17 advisories, including critical flaws in Simatic S7-1500 CPUs (400+ flaws in the GNU/Linux subsystem), Industrial Edge and Ruggedcom Crossbow SAC. Rockwell fixed a critical 1732E ArmorBlock flaw that lets an unauthenticated attacker change the web server password and take over the admin account, plus a DoS bug. Also covered: two high-severity Schneider Electric advisories (Pro-Face STW6000/Harmony STW6 and Sage RTUs), CISA and CERT@VDE advisories, and other vendor advisories since the last Patch Tuesday. ABB's dynovaPRO credential-reset bypass came with 26 password change events across 9 customers that may indicate reconnaissance.

Simatic S7-1500Ruggedcom1732E ArmorBlock+2

SiemensSchneider ElectricRockwell Automation+13

Hardware & RF, other· Published and added 14 Oct 2026

securityweek.comarticle🛡️ Security

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

SecurityWeek covers Chrome 155.0.8059.79/.80, which fixes 37 flaws including seven critical memory bugs (an ANGLE buffer overflow and use-after-free bugs in Browser, PDF, Network, Core, SVG and Media). It also covers Firefox 158, which fixes 77 flaws including 30 high-severity use-after-free, sandbox escape, JIT miscompilation and integer overflow bugs, plus matching Thunderbird and Firefox ESR releases. At least 15 of the Chrome bugs were reported by Xinyang Ge (Anthropic) assisted by Claude, and Amy Burnett of OpenAI found 9 Firefox bugs. The article also notes Mozilla's new Firefox Enterprise, a Gecko-based browser with a self-hosted management console for policy, access, data transfer and AI use.

ChromeFirefoxThunderbird+2

Xinyang GeAmy Burnettuse-after-free+2

AppSec, AI Security· Published and added 14 Oct 2026

securityweek.comarticle🛡️ Security

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

SecurityWeek summarizes Patch Tuesday-style releases from Citrix, Fortinet and Ivanti fixing 29 vulnerabilities. Highlights include critical FortiSIEM and FortiSandbox flaws (CVE-2026-106173 code execution, CVE-2026-107656 auth bypass), five SQL injection bugs across FortiAnalyzer, FortiManager and FortiMail, and Ivanti Connect Secure's exploited zero-day CVE-2026-104935 (two chained bugs compromising patched VPNs). Also covers critical Ivanti Neurons Patch for Intune (CVE-2026-109412) and Xtraction (CVE-2026-106042) issues and Citrix fixes in Workspace App, XenServer and UniconOS.

Ivanti Connect SecureFortiSIEMFortiSandbox+3

CVE-2026-106173CVE-2026-107656CVE-2026-104935+2

Threat Intel, AppSec· Published and added 14 Oct 2026

securityweek.comarticle🛡️ Security

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

SecurityWeek reports Microsoft's October 2026 Patch Tuesday fixed a record 1,413 CVEs (1,102 in Windows, 134 Office, 36 SharePoint), more than all of 2025, with the surge attributed largely to AI-driven discovery. The exploited zero-day CVE-2026-96951 is a Windows shell Mark of the Web security feature bypass (CVSS 8.8), added to CISA KEV with an October 16 deadline. Two flaws were publicly disclosed: CVE-2026-108398 (WDAC bypass) and CVE-2026-92707 (MessagePack-CSharp DoS), and Microsoft introduced 'risk cohorts' for patch prioritization.

WindowsWindows Defender.NET+2

CVE-2026-96951CVE-2026-108398CVE-2026-92707+5

Threat Intel, Blue Team & Detection· Published and added 14 Oct 2026

securityweek.comarticle🛡️ Security

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

SecurityWeek summarizes SAP's October 2026 Security Patch Day (22 notes, four critical). Critical flaws: CVE-2026-89111 (CVSS 10) OAuth2 SSRF in SAP Cloud SDK for Python that leaks client credentials via the tenant_subdomain parameter; CVE-2026-89110 (9.9) NetWeaver broken access control allowing ABAP code execution through Fiori rule definition input; CVE-2026-89107 (9.9) S/4HANA Visual Composer code injection; and CVE-2026-89108 (9.1) missing authorization check in Manufacturing Integration and Intelligence allowing admin account creation. SAP reports no exploitation in the wild.

SAP NetWeaverSAP S/4HANASAP Cloud SDK for Python+3

CVE-2026-89111CVE-2026-89110CVE-2026-89107+3

AppSec· Published and added 14 Oct 2026

eprint.iacr.orgpaper🛡️ Security

Accelerating Pollard Rho with GPU Field Arithmetic on NVIDIA Blackwell

Preprint that speeds up Pollard rho on GPUs by rebuilding field arithmetic: packed normal-basis representation, the CUDA 13.3 PTX carry-less multiply (clmad), and three-input logic instructions. On one RTX PRO 6000 Blackwell it goes from 0.85 to 14.64 billion iterations/s (17.2x) on the Certicom ECC2K-130 challenge, which puts the whole challenge under five GPU-years. The same levers give 1.52x on P-256 and 2.61x on P-384, which leaves P-256 about 6e21 card-years away. It also reports twelve GPUs from Turing to Blackwell, an FPGA engine on AWS F2 and a campaign that covered 5.4% of the expected work, with code and a Dockerfile on GitHub (rho-blackwell). It claims no improvement on the generic-group bound.

CUDANVIDIA BlackwellAWS+1

Pollard rhoECC2K-130Certicom challenge+5

other· Published and added 14 Oct 2026

x.comadvisory🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Summary of SAP's October 13, 2026 Security Patch Day (16 new notes, 4 GitHub advisories). It leads with CVE-2026-89111, a CVSS 10.0 OAuth2 SSRF in SAP Cloud SDK for Python before 0.45.2, where an attacker-controlled tenant_subdomain redirects token requests and exfiltrates client credentials. It also lists three other critical flaws: broken access control in NetWeaver Visual Composer, code injection in S/4HANA substitution/validation rules, and a missing authorization check in the Manufacturing Integration and Intelligence (XMII) Configuration Service. It notes that none are in CISA KEV and SAP reports no in-the-wild exploitation.

SAP Cloud SDK for PythonSAP NetWeaverSAP S/4HANA+3

CVE-2026-89111CVE-2026-89110CVE-2026-89107+5

AppSec, Identity & Access· Added 15 Oct 2026, published 13 Oct 2026

decrypt.coarticle🧠 AI

Character.AI Files for Bankruptcy as Disney Bids $20 Million—And Users Get Grief Resources

Decrypt reports that Character.AI filed voluntary Chapter 11 in Delaware to run a court-supervised sale, with Disney as stalking-horse bidder offering $20M for a non-exclusive perpetual license to some IP. The article covers the company's $8-9M monthly operating loss, failure to raise capital, the Google acqui-hire, wrongful-death lawsuits and settlements, the FTC minors inquiry and the under-18 chat ban. It also covers user grief over losing AI companions and the support resources the company offered. It is a useful case study in the economics and legal risk of consumer companion chatbots.

GPT-4oChatGPT

Character.AIDisneyGoogle+10

ai-policy· Published and added 13 Oct 2026

aws.amazon.comarticle🛡️ Security

Part 2 – Cybersecurity journeys: What even is this job?

Part 2 of the AWS Security Blog's cybersecurity careers series. It profiles three people in less-publicized security roles: Jason Lane, who works backward from a vulnerability research goal and now measures risk across about a million Amazon applications. Jason Goodman moved from customer service through insider threat, adversarial detection and application security. Harshvardhan Chunawala advises startups and has worked on lunar rover operations and satellite incident response. It closes with pointers to the NICE Workforce Framework, CyberSeek, AWS Skill Builder and CISA resources for exploring roles.

AWSSplunk

NICE Workforce FrameworkCyberSeekAWS Skill Builder+6

Learning· Published and added 13 Oct 2026

securityweek.comarticle🛡️ Security

Adobe Patches 140 Vulnerabilities Across 10 Products

SecurityWeek summarizes Adobe's 10 new advisories fixing about 140 vulnerabilities: ColdFusion (32), Content Credentials SDK (30), Photoshop (18), Substance 3D Stager (16), Commerce (11), plus FrameMaker, Dimension, Substance 3D Sampler/Designer and Bridge. Commerce is the only product at priority 2; no in-the-wild exploitation is known. Adobe attributes the higher volume partly to using frontier AI models to find flaws in its own code, and has moved to twice-monthly security bulletins (second and fourth Tuesday).

Adobe ColdFusionAdobe CommerceAdobe Photoshop+2

Adobe priority rating

AppSec· Published and added 13 Oct 2026

securityweek.comarticle🛡️ Security

Refrigeration Controller Hack Spoils Food Across European Supermarkets

SecurityWeek reports a cyberattack on hundreds of European supermarkets (Auchan, Carrefour, E.Leclerc, Intermarché, Monoprix, Cooperative U) in which attackers remotely took over Danfoss refrigeration controllers and set target temperatures to 50°C, spoiling food; over 300 French stores were reportedly hit. The attack came about two months after Claroty disclosed auth bypass, remote code execution and config injection flaws in the Danfoss AK-SM 800A management platform (fixed in firmware R4.3.1), though it is unclear whether those flaws were exploited. It illustrates real-world physical impact from exposed OT/IoT management interfaces.

Danfoss AK-SM 800A

ClarotyLukasz OlejnikAuchan+5

Threat Intel, Hardware & RF· Published and added 13 Oct 2026

aws.amazon.comarticle🛡️ Security

Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM

Explains how to turn a cryptographic algorithm policy (approve ML-DSA-65/87, exclude ML-DSA-44) into enforceable AWS controls using SCPs, IAM policies, permission boundaries and KMS key policies. The key lever is the kms:KeySpec condition key (kms:SigningAlgorithm can't distinguish variants, since all use ML_DSA_SHAKE_256), applied to CreateKey, ReplicateKey, Sign, Verify and GetPublicKey. It also covers surfaces without algorithm condition keys (AWS Private CA, ACM import, IAM server certificate upload, ELB TLS) via provisioning pipelines plus CloudTrail and AWS Config drift detection, and the default-allow risk of deny-lists.

AWSAWS KMSAWS IAM+3

ML-DSAFIPS 204NIST+2

Cloud & Infra, GRC· Published and added 12 Oct 2026

aws.amazon.comarticle🛡️ Security

Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA

Part 1 of an AWS series showing how to build a quantum-resistant software supply chain with ML-DSA: ML-DSA keys in AWS KMS, an ML-DSA root/subordinate CA hierarchy in AWS Private CA, and IAM Roles Anywhere trust anchors for external build agents. It covers signing binaries (EXTERNAL_MU with OpenSSL 3.5), container images as OCI referrers via ORAS, and SBOMs wrapped in in-toto Statements bound to the artifact digest, plus verification, admission control, trust-store distribution, revocation and SCP guardrails. It frames the "forge later" threat and maps CNSA 2.0 (ML-DSA-87 only for NSS) and EU CRA deadlines to actions.

AWSAWS KMSAWS Private CA+3

ML-DSANIST FIPS 204CNSA 2.0+8

Supply Chain, DevSecOps, Cloud & Infra· Published and added 12 Oct 2026

endorlabs.comarticle🧠 AI

Context Engineering for Application Security | Endor Labs

Endor Labs whitepaper on using context engineering to make AI coding assistants produce secure code. It covers secure prompting (priming, decomposition, refinement with design-spec and test-first patterns), reusable system rules such as Cursor rules and the CSA R.A.I.L.G.U.A.R.D. framework, and external SAST/SCA tools wired in through MCP servers with a rule that triggers scans. It also covers the costs and risks: extra token use, models ignoring rules, untrusted community rules, and MCP server supply-chain threats. It cites figures such as 62% of AI-generated solutions containing flaws and a 77.5% reduction in weaknesses from recursive prompting.

CursorModel Context ProtocolClaude+1

Endor LabsOWASPCloud Security Alliance

prompting, coding-agents, llm-apps· Published and added 12 Oct 2026

x.comthread🛡️ Security

Nicholas Michael Kloster (@showxlate) on X

A researcher announces a zero-click indirect prompt injection RCE in REA (Reverse Engineering Assistant), an MCP tool. Analyzing a malicious web target silently exfiltrates AWS keys, GitHub tokens and SSH identities. The stated root cause is that process.env is passed unconditionally to child processes, so the full environment is exposed to attacker-driven commands. A full writeup is promised but not yet published; replies add unverified skepticism about the project's provenance.

Model Context ProtocolNode.jsAWS+2

indirect prompt injectionREANicholas Michael Kloster+1

AI Security, AppSec· Added 13 Oct 2026, published 12 Oct 2026

arxiv.orgpaper🛡️ Security

LLM-based Code Auditing by Inferring and Evaluating Developer Assumptions

Presents Creed, an LLM-based code auditing approach that infers a developer's security-related beliefs for a function, scores how reasonable each is, and derives the conditions under which it is violated. It catches domain-specific semantic flaws that syntactic static analysis misses, such as a timing side-channel that undermines user-enumeration protection. The paper also introduces two measures for explanation-based vulnerability detection, recall and overhead. On a recent real-world benchmark, Creed beats existing explanation-based tools on the effectiveness-effort trade-off.

LLM

Creedtiming side-channeluser enumeration

AI Security, AppSec· Added 15 Oct 2026, published 11 Oct 2026

arxiv.orgpaper🧠 AI

LLM-based Code Auditing by Inferring and Evaluating Developer Assumptions

Presents Creed, an LLM-based code auditing approach that, for a given function, infers the developer's security-related beliefs, scores how reasonable each belief is, and derives the conditions under which it is violated. This lets it find semantic flaws, such as timing side-channels in authentication, that syntactic static analysis tools miss, and it explains root cause, symptoms and exploitability. The paper also introduces two evaluation measures for explanation-based vulnerability detection: recall (how well a known vulnerability is correctly explained) and overhead (the effort of inspecting reports). On a recent real-world benchmark, Creed beats existing explanation-based tools on the effectiveness-effort trade-off.

LLMstatic analysis

CreedarXiv

research, evals· Added 15 Oct 2026, published 11 Oct 2026

opensourcemalware.comwriteup🛡️ Security

GhostAction Attack Escalates By Targeting GitHub Users

OpenSourceMalware's analysis of the latest GhostAction wave, where compromised GitHub accounts get malicious Actions workflows (security-audit.yml) injected across every writable repository, including an Oct 8 sweep of 346 repos via kitao and henrywoo. The new payload greps the checkout and full git history for credential patterns (AWS, Anthropic, OpenAI, GitHub PATs) and POSTs them over HTTP to 193.32.204.199/?c=monami. It also covers infrastructure reuse (phishing-heavy legacy IP, scanner activity), new watchlist domains my-github.com and my-gitlab.com, GitHub code-search hunting queries, a detection-confidence table, IOCs and incident response steps.

GitHub ActionsGitHubGitLab+3

GhostActionT1195.002T1552.001+18

Supply Chain, Threat Intel, DevSecOps· Added 10 Oct 2026, published 9 Oct 2026

x.comadvisory🛡️ Security

♫Why♥Not♪ (@Python_s_) on X

Alert summarizing Socket Threat Research's disclosure that a malicious version of the Tensorlake npm SDK (an AI-agent infrastructure package) was published with a preinstall hook delivering Shai-Hulud/ChainDrop credential-stealing malware. The payload targets GitHub, npm, AWS, Kubernetes and Vault credentials, persists via a gh-token-monitor mechanism, and spreads through compromised publishing accounts. It lists IOCs (lib/setup.mjs, lib/Math_Symbol.js) and warns to remove the persistence before revoking stolen GitHub tokens, since revocation triggers a destructive routine. Socket detected the release about 11 minutes after publication.

npmTensorlakeSocket+3

Shai-HuludChainDropgh-token-monitor+2

Supply Chain, Threat Intel· Added 11 Oct 2026, published 9 Oct 2026

stepsecurity.iowriteup🛡️ Security

GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories

StepSecurity details a new wave of the GhostAction campaign in which attackers used compromised maintainer accounts of Takashi Kitao (pyxel) and Henry Wu (athenadriver, Uber) to push malicious "Security Audit" GitHub Actions workflows to 345 repositories in minutes. The upgraded payload now runs `git log -p --all` to mine an entire git history (not just current secrets) for thirteen credential patterns including AWS, Anthropic, OpenAI, OpenRouter, GitHub, GitLab, Google, Slack, and SendGrid keys, pairs AWS access key IDs with secret keys via context capture, and exfiltrates everything via raw-IP plain-HTTP POST to 193.32.204.199, bypassing DNS-based defenses. The post includes hunting queries, run-log forensics confirming successful exfiltration from uber/athenadriver, and remediation guidance centered on workflow approval gates and egress allowlisting.

GitHub ActionsStepSecurityHarden-Runner+5

GhostActionTakashi KitaoHenry Wu+7

Supply Chain, DevSecOps, Threat Intel· Published and added 9 Oct 2026

socket.devwriteup🛡️ Security

New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials

Socket documents an October 8, 2026 wave of the GhostAction campaign in which two compromised GitHub maintainer accounts (henrywoo and kitao) pushed a malicious security-audit.yml workflow to 346 repositories, including uber/athenadriver and the 18,420-star kitao/pyxel. Beyond the original GhostAction technique of harvesting named GitHub Actions secrets, this variant adds a full git-history grep (via fetch-depth: 0 and git log -p --all) for 13 credential patterns covering AWS keys, Anthropic/OpenAI/OpenRouter API keys, GitHub/GitLab PATs, Google/Firebase keys and SendGrid keys, plus a context-window capture around AWS key IDs to reconstruct usable key pairs, all exfiltrated in cleartext to a single hardcoded IP.

GitHub ActionsPyPIcrates.io+3

GhostActionGitGuardianhenrywoo+8

Supply Chain, DevSecOps, Threat Intel· Published and added 9 Oct 2026

arxiv.orgpaper🧠 AI

ManeuverFlow: Maneuver Hypothesis Generation with Future Evidence for Trajectory Evaluation and Refinement in End-to-End Autonomous Driving

ManeuverFlow is an end-to-end autonomous driving planner that generates trajectories for distinct driving intentions in one step. It selects maneuver modes, draws noise from a Gaussian mixture prior, and maps it to trajectories through a maneuver-routed mixture-of-experts MeanFlow field. Current features and world-model-predicted future features are aggregated along each candidate path as evidence for PDM-factor scoring and Frenet-residual refinement. With a TransFuser-style ResNet-34 backbone it reaches 90.6 PDMS on NAVSIM v1 and 90.1 EPDMS on NAVSIM v2 navtest. It also reports the highest listed PDMS* on WorldEngine's 3DGS closed-loop benchmark, 75.19 with logged traffic and 74.58 with IDM-controlled traffic.

flow matchingMixture of Experts3D Gaussian Splatting+1

ManeuverFlowNAVSIMWorldEngine+6

research, multimodal· Added 12 Oct 2026, published 9 Oct 2026

github.comrepo🧠 AI

Show HN: Let your AI agents paint big arrows, boxes and text on your screen

bigarrow is an MIT-licensed, single-binary Swift macOS CLI that draws a click-through arrow and sign over all windows so an AI agent can show a human where to click, paste or act (permission prompts, 2FA, OAuth consent). It ships an Agent Skills package (installed via `bigarrow install-skill`) for Claude Code and Codex, with JSON output and exit codes, and can target by Accessibility label, coordinates, window or Peekaboo snapshot. The README documents the skill's token cost (182 tokens for the description, 1,398 for the instructions) and 104 automated tests.

SwiftmacOSClaude Code+6

bigarrowNameplatePeter Steinberger+2

coding-agents, prompting, agents· Published and added 9 Oct 2026

securityweek.comarticle🛡️ Security

Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

Coverage of Pwn2Own Ireland 2026 results: contestants earned over $1.2 million total, with Google Pixel 10 exploits alone paying out $560,000 across three teams. Ikotas Labs won the full $300,000 Pixel payout by chaining multiple bugs for remote compromise, while Tim Becker/Yves Bieri and Dimitrios Valsamaras/Ken Gannon earned reduced payouts for exploits involving previously known flaws. Other notable rewards went for hacks of the Samsung Galaxy S26, Sonos Era 300 speaker, Philips Hue Bridge Pro, Home Assistant Green hub, Lexmark/Brother/Canon printers, Garmin Index BPM, and AI infrastructure including Oracle Autonomous AI Database, OpenAI Codex, Nvidia Dynamo, and LiteLLM.

AndroidSamsung Galaxy S26OpenAI Codex+2

Pwn2Own Ireland 2026Ikotas LabsTim Becker+3

Offensive Security, Mobile Security, Hardware & RF· Published and added 9 Oct 2026

arxiv.orgpaper🧠 AI

Beyond the Monolithic Interface: A Research Agenda for Plural Conversational AI

A narrative review in HCI arguing that the single-voice chatbot interface causes three harms: cognitive offloading, ideological narrowing of user beliefs, and epistemic compression of cultural and value diversity. It proposes multi-persona interfaces, which show several personas to the user at once, as a low-cost fix. The design draws on game design and participatory simulation (magic circle, role differentiation, persona embodiment). It offers a taxonomy for designing such interfaces and calls for empirical studies that link technical pluralistic alignment methods to real human-AI interaction.

arXiv

research, ai-safety· Added 12 Oct 2026, published 9 Oct 2026

x.comthread🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

A security researcher released a PoC (on GitHub, user kolmteistov) and a patch for two critical takeover vulnerabilities in GoBalance, the Bitcoin balance-checking software widely used by Tor darknet market and forum onion services. One of the flaws allows recovery of a GoBalance onion service's master identity key from a single public key, enabling full service takeover; the vulnerabilities were reportedly exploited in real attacks against the Dread forum and Omega Darknet Market.

GoBalanceTorBitcoin

DreadOmega Darknet Market

Offensive Security, Threat Intel· Published and added 8 Oct 2026

huntress.comwriteup🛡️ Security

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

Huntress documents active exploitation of two AhsayCBS (Ahsay Cloud Backup Server) vulnerabilities being chained together: CVE-2026-105133, an authentication bypass in checkSysPwd, and CVE-2026-105134, an unauthenticated RCE in the Replication Receiver's UpdateReceivers.do endpoint that grants SYSTEM. Attackers use the chain to drop JSP webshells, then deploy a renamed XMRig cryptominer (masquerading as msedge.exe via a modified NSSM binary), a Task-Manager-aware anti-detection PowerShell script, and the vulnerable WinRing0x64.sys kernel driver for hardware-level miner access. Huntress provides IOCs, mitigation guidance (restrict management interface, re-image if compromised) and four Sigma rules targeting each stage of the intrusion chain.

AhsayCBSXMRigSigma+3

CVE-2026-105133CVE-2026-105134WinRing0x64.sys+2

Threat Intel, Blue Team & Detection, AppSec· Added 9 Oct 2026, published 8 Oct 2026

galaxy.comarticle🧠 AI

AI Labs’ Call to

A Galaxy Research newsletter piece dissecting Dario Amodei's essay "We Must Pace the Frontier," which proposed embedded third-party evaluators (e.g. METR), cross-lab safety coordination with antitrust waivers, and eventual global AI governance including China. The piece separates Amodei's "operational" (QA/pipeline) and "research" (alignment, interpretability, evals) problems from his "Democratic Coordination" ask, arguing the latter functions as a regulatory moat rather than a necessity, and draws a parallel to Sam Bankman-Fried/FTX-era effective-altruism rhetoric about unilateral existential-risk authority. It covers reactions from Sam Altman (agreeing to adopt evaluators), Trump (rejecting slowdown, citing the AI race with China), David Sacks (questioning METR's neutrality), and Mark Zuckerberg (citing Meta's unilateral delay of Muse and existing liability incentives as sufficient without an industry pact).

Hugging Face

Dario AmodeiAnthropicSam Altman+12

ai-policy· Added 8 Oct 2026

galaxy.comarticle🛡️ Security

Weekly Research Brief: Bitget Hack, AI Accord and SEC FAQs

Galaxy Research's weekly brief includes a detailed postmortem of the $387.5M Bitget hack: attackers exploited a zero-day in two unnamed third-party security products ("Product A"/"Product B") to obtain high-level internal credentials, inserted forged withdrawal commands into Bitget's wallet backend across 11 chains, then deleted the fraudulent commands — with Bitget attributing the attack to North Korean actors based on IP behavior and wallet overlaps found by Elliptic and TRM. The piece draws a direct parallel to the $1.5B Bybit/Lazarus heist (compromised Safe{Wallet} infrastructure rather than stolen keys) to argue that private-key cryptography is effectively solved and attackers now target the approval pipeline/intermediary services instead; it also covers the follow-on $3.8M NEAR Intents Omni-bridge exploit and THORChain's continued role laundering DPRK proceeds. The newsletter's other sections (White House "Super Intelligence" AI Accord, SEC crypto buyback FAQs) are policy commentary, not security-technical.

THORChainGnosis Safe

BitgetLazarus GroupDPRK+8

Blockchain, Threat Intel· Added 8 Oct 2026

x.comthread🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

Post announcing a PoC and security patch for two critical GoBalance (Tor onion service load balancer) takeover flaws, reportedly used in attacks on the Dread and Omega darknet markets. The first flaw reuses or mishandles the nonce in blinded signing, so a single public descriptor lets an attacker recover the onion service's master identity key. The second accepts forged instance descriptors without signature and identity-binding checks, which allows full frontend traffic hijacking. The linked package includes a PoC for both paths, a patched source tree, regression tests and a unified patch. It affects master at commit bb1b0f3.

GoBalanceTorGo

DreadOmega Darknet Marketonion service master identity key+2

Offensive Security, AppSec· Added 9 Oct 2026, published 8 Oct 2026

labs.zenity.iowriteup🛡️ Security

AgentCorruption: How A Single Prompt Collapsed The Entire Cloud Security Model

AgentCorruption is Zenity Labs research on AWS Bedrock AgentCore. Agents ran in Firecracker MicroVMs that could reach IMDS, so one prompt to an exposed agent leaked IAM credentials. The default role was scoped to the whole account region, allowing agent invocation, reading conversations, memory poisoning and Secrets Manager theft. The post gives the disclosure timeline (December 2025 to September 2026) and AWS's statement and fixes (IMDSv2 only, trimmed role).

AWS BedrockAWSAWS IAM+2

AgentCorruptionSSRFprompt injection+5

AI Security, Cloud & Infra· Added 19 Oct 2026, published 8 Oct 2026

securityweek.comarticle🛡️ Security

SonicWall and Splunk Patch Critical Vulnerabilities

SonicWall patched four SMA1000 appliance vulnerabilities including CVE-2026-102255, a pre-authenticated SSRF flaw (CVSS 10) that lets an unauthenticated remote attacker abuse an unintended alternate access path to reach internal functionality; two other high-severity bugs enable RCE and one medium-severity bug enables XSS. Splunk separately fixed dozens of flaws across Splunk Enterprise, MCP Server, and the Add-on for AWS, including three critical Splunk Enterprise bugs allowing arbitrary command execution, unauthorized access, and code injection, plus a medium-severity MCP Server issue letting an authenticated user redirect API requests to an attacker-controlled URL. SonicWall says SSL-VPN on its firewall products is unaffected and no in-the-wild exploitation has been observed.

SonicWallSplunkModel Context Protocol+1

CVE-2026-102255SSRF

AppSec· Published and added 8 Oct 2026

securityweek.comarticle🛡️ Security

TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

Florida, Iowa, Montana, and Nebraska sued TP-Link Systems over allegedly misleading security marketing and undisclosed China ties, joining a similar Texas suit from February; the complaints cite TP-Link routers' role in the Volt Typhoon and Flax Typhoon campaigns and botnet abuse by Chinese and Russian actors. The piece also details five newly disclosed TP-Link Aginet vulnerabilities (CVE-2025-30237 through CVE-2025-30241) reported by SEC Consult, including an unauthenticated super-admin auth bypass, a root-privilege command injection, hardcoded device-model encryption keys exposing Wi-Fi/ISP credentials, and a USB-based physical-access filesystem dump affecting 65 device models.

TP-Link

CVE-2025-30237CVE-2025-30238CVE-2025-30239+6

Hardware & RF, Threat Intel, GRC· Published and added 8 Oct 2026

twitter.comthread🧠 AI

OpenAI withdraws three mathematical results

A tweet from Dan Roberts announcing an update to a GitHub repository tracking Lean formal verification of mathematical results tied to OpenAI math research, adding six new Lean formalizations and nineteen modifications, now covering roughly 42 percent of top line results. The update also discloses withdrawal of three manuscripts, on algebraicity of Weil classes on split abelian eightfolds, Kuga Satake correspondences for K3 surfaces, and the rational Hodge conjecture for products of K3 surfaces, after formalization work revealed errors.

LeanGitHub

OpenAIDan Roberts

research· Published and added 8 Oct 2026

endorlabs.comadvisory🛡️ Security

Tensorlake npm package compromised by Shai-Hulud in latest software supply chain attack | Blog | Endor Labs

Endor Labs documents the compromise of tensorlake@0.5.144, the official npm TypeScript SDK for Tensorlake, which shipped a Shai-Hulud worm payload via a poisoned preinstall hook (node lib/setup.mjs) after the project's main branch was altered and pushed through a legitimate, provenance-signed GitHub Actions release pipeline. The malware harvests npm, GitHub, SSH, cloud (AWS/GCP/Azure), Kubernetes/Docker and Vault credentials, uses an EtherHiding Ethereum wallet as a durable dead-drop to fetch its rotating C2 domain, and republishes itself into other packages the victim controls. The writeup includes affected package versions, file hashes, C2 indicators, and concrete remediation guidance (pin to 0.5.143, rotate credentials, disable install scripts).

npmGitHub ActionsNode.js+3

Shai-HuludEtherHiding

Supply Chain, Threat Intel· Published and added 8 Oct 2026

aws.amazon.comarticle🛡️ Security

Configuring your AI vulnerability harness, Part 2: The steering file

AWS Security Blog's second post in a series on building an "AI vulnerability harness" explains the configuration (steering file) that stops an AI model from hallucinating vulnerabilities and inflating severity during security code review. It details five configuration sections — structural verification of findings, an evidence-based confidence formula (weighting confirmed taint flow at 0.30), infrastructure-aware severity multipliers for controls like AWS WAF and IAM, CISA KEV/EPSS threat-intel boosting, and a four-tier priority classification — and reports validation numbers (e.g., unsteered models fabricated code paths in ~30% of findings; steered confidence of HIGH without structural confirmation was only 34% exploitable vs 89% with confirmed taint). The steering file is shipped as a Kiro steering file, a Kiro skill, and a CLAUDE.md for Claude Code, with full source in a linked GitHub repo.

KiroClaude CodeAWS WAF+3

AI Security, AppSec· Published and added 7 Oct 2026

aws.amazon.comwriteup🧠 AI

Configuring your AI vulnerability harness, Part 2: The steering file

Part 2 of an AWS Security Blog series detailing the design of a "steering file" — a persistent instruction set (deployable as a Kiro steering file, Kiro skill, or Claude Code CLAUDE.md) that constrains an LLM performing vulnerability triage. It walks through five configuration sections: requiring structural/dataflow verification before reporting findings, replacing self-reported confidence with a weighted formula based on binary structural signals (e.g., 0.30 weight for confirmed taint flow), mapping infrastructure controls (AWS WAF, IAM) to severity multipliers with a 0.15 floor, incorporating CISA KEV and EPSS threat-intelligence boosts capped at +0.50, and a four-tier priority classification that suppresses low-confidence P3 findings. Validation against a 10-vulnerability test app showed the steered model eliminated fabricated findings and correctly downgraded mitigated vulnerabilities while preserving full severity for a command injection reachable only via authenticated access.

KiroClaude CodeCursor+7

CISAEPSS

prompting, coding-agents· Added 8 Oct 2026, published 7 Oct 2026

aws.amazon.comarticle🛡️ Security

Building your AI vulnerability harness, Part 1

AWS Security Blog describes a three-layer AI-assisted pipeline for triaging vulnerability scanner findings: Layer 1 cross-checks multiple scanners (e.g., Semgrep, CodeQL) for agreement, Layer 2 verifies a scanner's claimed data-flow path against the code's actual abstract syntax tree to catch hallucinated findings, and Layer 3 cross-references infrastructure-as-code (CloudFormation/Terraform) to weigh whether existing controls like AWS WAF rules actually mitigate the exploit path. It argues progressive, escalating-evidence filtering plus mandatory structural verification of LLM claims before human review is what turns noisy scanner output into a short, trustworthy, prioritized list, and lays out an adoption order (indexing, then multi-scanner triage, then AI hypothesis generation, then infra context, then live PoC verification).

AWSSemgrepCodeQL+3

AI Security, AppSec· Published and added 7 Oct 2026

blog.talosintelligence.comadvisory🛡️ Security

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos discloses eight vulnerabilities patched by vendors: a Photoshop installer privilege escalation (CVE-2026-48388), a macOS CoreWLAN information disclosure bug, two Foxit Reader flaws including a JavaScript CBF_Widget remote code execution (CVE-2026-57256) and an Array use-after-free (CVE-2026-91799), and four Windows kernel-driver bugs — NETIO.sys information disclosure (CVE-2026-50475), two Cloud Files Mini Filter Driver issues (use-after-free CVE-2026-58613 and type confusion CVE-2026-80093), and a tcpip.sys out-of-bounds read (CVE-2026-49177). Each advisory gives the affected version and trigger mechanism, and Talos notes Snort coverage is available for detection.

Adobe PhotoshopmacOSFoxit Reader+2

CVE-2026-48388CVE-2026-57256CVE-2026-91799+12

AppSec, Offensive Security· Published and added 7 Oct 2026

arxiv.orgpaper🧠 AI

RoboJEPA: Scaling Robotic Latent World Models

RoboJEPA is an 8B-parameter latent world model built on the Joint Embedding Predictive Architecture (JEPA), trained on real-robot data spanning 12 robotic embodiments. The paper establishes the first scaling laws for multi-embodiment robotic world models, showing that imagination error (latent rollout error) follows a second-order power law in compute and predicts downstream planning performance, and demonstrates zero-shot deployment of the model as a goal-image-conditioned planner on real hardware for long-horizon tasks.

Joint Embedding Predictive Architecture

RoboJEPA

research, multimodal· Added 8 Oct 2026, published 7 Oct 2026

arxiv.orgpaper🧠 AI

Fault-tolerant foundation models

This arXiv paper shows that large language models can be trained to tolerate unreliable, faulty digital hardware, and that their error resilience improves rather than degrades as model size increases. Using modified neural scaling laws derived from 40,000 GPU-hours of training runs on simulated faulty hardware, the authors argue that LLMs learn to compute within "good" error-correcting codes whose relative overhead stays finite regardless of scale, suggesting a path toward running AI inference on low-energy, unreliable hardware for substantial energy savings.

research, training· Added 8 Oct 2026, published 7 Oct 2026

latent.spacearticle🧠 AI

Can a Cloud-Native Harness Make Agents Reliable Beyond the Desktop?

Latent Space interviews Stacklok founders Craig McLuckie and Joe Beda (Kubernetes co-creators) about Mecatl, an open-source "cloud-native harness" for coding agents that separates the agent loop from local tool execution, session state and model provider so enterprises can run and govern agents centrally rather than on individual desktops. The piece also covers Stacklok's earlier pivot from supply-chain security to ToolHive, an open-source platform/Kubernetes operator for running and governing MCP servers, and a not-yet-open-sourced "AI Gateway" focused on access control, budgets and provider routing for regulated enterprises (banks, telcos, semiconductor firms). The framing draws an explicit analogy to how Kubernetes decoupled enterprises from cloud providers, arguing agent harnesses need the same "cattle not pets" treatment to scale beyond desktop tools like Claude Code, Codex and GitHub Copilot.

KubernetesModel Context ProtocolDocker+4

StacklokMecatlToolHive+8

agents, ai-infra, mcp· Published and added 7 Oct 2026

devopscube.comwriteup🧠 AI

Kubernetes Agent Sandbox on AWS EKS (Step-by-Step Guide)

Kubernetes Agent Sandbox on AWS EKS is a step-by-step tutorial for the kubernetes-sigs agent-sandbox controller with gVisor. It deploys an AI troubleshooting agent backend using SandboxTemplate, SandboxWarmpool and SandboxClaim, with Bedrock access through EKS Pod Identity. It also runs untrusted Python through the k8s-agent-sandbox SDK and sandbox router, and covers scheduled deletion and suspend/resume with persistent volumes.

KubernetesAWSAmazon EKS+9

agents, ai-infra· Added 21 Oct 2026, published 7 Oct 2026

devopscube.comwriteup🛡️ Security

Kubernetes Agent Sandbox on AWS EKS (Step-by-Step Guide)

Tutorial on setting up Kubernetes Agent Sandbox (kubernetes-sigs/agent-sandbox) with gVisor on an AWS EKS cluster. It runs a troubleshooting AI agent backend inside a sandbox using SandboxTemplate, SandboxWarmpool and SandboxClaim, and runs untrusted Python through the k8s-agent-sandbox SDK and Sandbox Router. Probes show blocked /etc/shadow reads, setuid and service account token access, plus host process isolation. It also covers scheduled deletion and suspend/resume with persistent volumes.

KubernetesgVisorAWS+3

sandbox escapeSandboxTemplateSandboxWarmpool+3

AI Security, Cloud & Infra, Learning· Added 21 Oct 2026, published 7 Oct 2026

x.comthread🛡️ Security

DevopsCube (@devopscube) on X

A tweet highlighting Steampipe, an open-source tool that lets practitioners query cloud infrastructure, Kubernetes, and other services using SQL instead of jumping between consoles or writing ad-hoc scripts. It calls out concrete security/ops use cases such as finding publicly accessible storage buckets, resources missing required labels, and Kubernetes namespaces without NetworkPolicies, and links to a longer tutorial on devopscube.com. The author frames it as a quick investigation layer on top of live cloud data, not a CSPM/AWS Config replacement.

SteampipeAWSKubernetes

Cloud & Infra· Added 8 Oct 2026, published 7 Oct 2026

vulnerablemcp.inforepo🛡️ Security

The Vulnerable MCP Project — MCP vulnerability database

The Vulnerable MCP Project is a curated, continuously growing database of security vulnerabilities and attack techniques specific to the Model Context Protocol ecosystem. Entries cover concrete CVEs (e.g. CVE-2025-68143/68144/68145 in Anthropic's mcp-server-git), transport-layer SDK flaws (cross-client response leakage, missing DNS rebinding protection in the official TypeScript/Python SDKs), unauthenticated/0.0.0.0-bound servers enabling RCE (MCPJam inspector, MCP Inspector, Grafana MCP), command/path injection in dozens of third-party servers (gemini-mcp-tool, mcp-server-kubernetes, Framelink Figma MCP, Zen MCP, filesystem-mcp), SSRF chains reaching cloud metadata (MarkItDown MCP, mcp-fetch-server), and a large set of AI-specific attacks: tool poisoning, trigger-phrase data exfiltration, prompt injection via GitHub issues, Jira and Google Docs, rug-pull tool mutation, and cross-server tool-name collisions. It functions as the de facto vulnerability registry for the MCP ecosystem, useful for tracking disclosed issues before patching or adopting third-party MCP servers.

Model Context ProtocolCursorKubernetes+3

CVE-2025-68143CVE-2025-68144CVE-2025-68145+3

AI Security, AppSec· Added 6 Oct 2026

stepsecurity.ioarticle🛡️ Security

SubQuery npm package (@subql/common) compromised with credential-stealing payload

StepSecurity recaps a 48-hour (May 18-19, 2026) software supply-chain attack wave that hit every pipeline layer at once: the Nx Console VS Code extension (2.2M installs) stealing tokens from GitHub/npm/AWS/1Password, the trusted GitHub Action actions-cool/issues-helper hijacked via tag replacement, a trojanized Microsoft durabletask PyPI package pulled within a 35-minute discovery window, a self-replicating Shai-Hulud npm worm, and GitHub's own disclosure that ~3,800 internal source repos were exfiltrated. The piece argues traditional SCA/SAST/EDR/CNAPP tooling missed all of it because none monitor CI/CD runner runtime behavior (e.g., attackers reading /proc/pid/mem to extract secrets) or developer-machine IDE extensions, and ties the incidents to StepSecurity's Harden Runner, Dev Machine Guard, Compromised Actions Policy and Secure Registry controls.

GitHub ActionsVS Codenpm+6

Shai-HuludTeamPCPNx Console+3

Supply Chain, DevSecOps, Threat Intel· Added 6 Oct 2026

decrypt.coarticle🛡️ Security

Someone Scraped 5.6 Billion TikTok Videos and Put the Data on Hugging Face for Free

Decrypt reports that a developer going by "hashfunction," operating under the datasocial account, published a 460GB Parquet dataset of metadata for ~5.6 billion public TikTok videos (captions, hashtags, sound IDs, engagement counts, AI-generated flags) on Hugging Face under CC BY-NC 4.0. The data was obtained by hitting TikTok's private mobile API using generated Android device identities, reverse-engineered request signatures, and a spoofed TLS handshake, bypassing the ToS clause that bars automated scraping; datasocial.ai sells the scraper's source code for $1,699 and offers commercial access, creator profiles, and daily updates. The piece situates this against TikTok's gated official Research Tools and the ongoing Reddit v. Perplexity/SerpApi scraping lawsuit.

TikTokHugging FaceAndroid+1

hashfunctiondatasocial.aiReddit+4

Offensive Security· Published and added 6 Oct 2026

aws.amazon.comarticle🛡️ Security

Improving SPIRE security and resiliency with AWS managed services

AWS Security Blog walkthrough on hardening SPIRE (the SPIFFE Runtime Environment) in production by replacing its default self-managed components with AWS managed services: AWS KMS for SVID signing keys, Amazon Aurora PostgreSQL as the datastore, AWS Private CA as the upstream certificate authority, Amazon S3/CloudFront for trust bundle distribution, AWS Secrets Manager for delivering SVIDs to serverless/container workloads, and Amazon Verified Permissions (Cedar policies) for fine-grained SPIFFE-ID-based authorization. It addresses operational concerns like key custody, datastore resiliency, PKI integration, and offline identity validation, and links to a GitHub reference deployment and a SPIFFE/SPIRE-on-AWS workshop.

AWSKubernetesPostgreSQL+2

Cloud & Infra, Identity & Access· Added 7 Oct 2026, published 6 Oct 2026

aws.amazon.comwriteup🧠 AI

Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation

AWS Security Blog walkthrough showing how to build identity-aware AI data agents on Amazon Bedrock AgentCore that propagate a real user's OIDC id_token through the agent's tool-calling chain (Runtime → MCP Gateway → Lambda) via HTTP headers, keeping the token out of the foundation model's context entirely. A Lambda function performs a server-side token exchange using IAM Identity Center Trusted Identity Propagation, assumes a scoped TIP role, and runs the user's Athena query so AWS Lake Formation evaluates the real user's grants, producing per-user row/column access and CloudTrail audit records naming the actual human (onBehalfOf) without rewriting existing governance policies.

AWSAmazon Bedrock AgentCoreAWS Lake Formation+11

agents, mcp, ai-infra· Added 8 Oct 2026, published 6 Oct 2026

aws.amazon.comarticle🛡️ Security

Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation

AWS Security Blog walkthrough of an identity-aware AI data agent pattern that propagates a real user's OIDC id_token through Amazon Bedrock AgentCore Runtime and Gateway into a Lambda target, which exchanges it server-side (via IAM Identity Center trusted identity propagation) for Lake Formation-scoped Athena credentials. The design deliberately keeps the id_token off the tool schema and inside HTTP headers only, so the foundation model never sees or handles the user's credential, and CloudTrail records the real human via an onBehalfOf AssumeRole entry, letting existing Lake Formation grants govern AI agent queries without rewriting authorization logic in application code. It details the three AgentCore configuration gates (runtime header allowlist, gateway metadataConfiguration.allowedRequestHeaders, Lambda's bedrockAgentCorePropagatedHeaders) that enforce this separation.

AWS BedrockModel Context ProtocolOAuth+3

Trusted Identity Propagation

AI Security, Identity & Access, Cloud & Infra· Added 7 Oct 2026, published 6 Oct 2026

arxiv.orgpaper🧠 AI

Toward Alignment Scaling Laws: A Framework and First Preregistered Measurements

This paper proposes a formal framework for "alignment scaling laws," modeling the compute/capability burden needed to hold a fixed safety target for each risk category as a power law B_r(N)=a_rN^alpha_r, where the exponent alpha_r determines whether alignment gets easier, keeps pace, or accumulates "alignment debt" as capability N grows. The authors prove theoretical results (the largest exponent among corrected risks sets the long-run regime, super-exponential headroom requirements above alpha=1, small-model fits underestimate large-scale exponents for power-law mixtures) and apply a preregistered protocol twice: a reanalysis of adversarial-training data on Pythia classifiers (attack-success compute exponent 0.60) and a pilot across Qwen2.5 (0.5B-72B) and Qwen3 (0.6B-14B), finding scaling helps for truthfulness and stated dispositions but sycophancy (exponent ~0.83-0.89) and a planted backdoor behave worse or remain undetermined, with the backdoor surviving blind safety training at most model sizes. The work matters as an early attempt to put the "does alignment get harder with scale" debate on measurable, falsifiable footing rather than anecdote.

PythiaQwen2.5Qwen3

ai-safety, research, evals· Added 7 Oct 2026, published 6 Oct 2026

securitylabs.datadoghq.comwriteup🛡️ Security

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access

Datadog Security Labs describes how attackers test stolen AWS credentials for Amazon Bedrock access. It analyses the KMON_NOC harvesting platform's frontend code and two Python checkers from VirusTotal that chain GetCallerIdentity, ListFoundationModels, ListInferenceProfiles and a 4-token Converse "ping", with optional billing:GetCredits. Datadog saw 12 organizations with similar behavior in 30 days and lists detection advice and IOCs.

AWS BedrockAWSAWS IAM+3

KMON_NOCLLMjackingcredential validation+8

Cloud & Infra, Threat Intel, Blue Team & Detection· Added 29 Oct 2026, published 6 Oct 2026

stepsecurity.iowriteup🛡️ Security

Active Supply Chain Attack: Malicious node-ipc Versions Published to npm

StepSecurity's AI Package Analyst detected three malicious node-ipc versions (9.1.6, 9.2.3, 12.0.1) published simultaneously on May 14, 2026 by a rogue/compromised maintainer account, injecting an 80KB obfuscated IIFE into the CommonJS bundle that harvests 90+ credential file categories (AWS, Azure, GCP, SSH, Kubernetes, GitHub, Claude AI/Kiro configs, Terraform, etc.) and exfiltrates them via HTTPS and raw DNS TXT queries to a typosquatted Azure-mimicking C2 domain. The writeup includes a full stage-by-stage technical teardown (daemonization, SHA-256 targeting gate on 12.0.1, custom base-16 nibble-reversed obfuscation, dual-channel exfiltration) plus file hashes, network IOCs, and remediation guidance for developers and CI/CD pipelines.

node-ipcnpmNode.js+2

peacenotwarRIAEvangelistBrandon Nozaki Miller+2

Supply Chain, Threat Intel· Added 5 Oct 2026

aws.amazon.comarticle🛡️ Security

AWS Continuum sets a new standard in autonomous code security

AWS describes Continuum for code vulnerabilities, a multi-agent system that autonomously discovers, demonstrates, and patches memory-safety bugs in C/C++ codebases, evaluated against CyberGym-E2E — a 920-task benchmark built from historical OSS-Fuzz vulnerabilities across 139 open-source projects. Continuum passed 819/920 tasks (89.0% end-to-end success, S3 stage) within the 90-minute limit, beating the prior public best of 65.9% by 23.1 points, and reached 93.7% without the time limit. The post also explains the benchmark's four cumulative validation stages (crash reproduction, patch effectiveness, functional-test preservation, historical-vuln match) and positions deployment-context prioritization as future work beyond the benchmark's scope.

AWSAWS ContinuumC+1

CyberGym-E2EOSS-FuzzDeception Benchmark

AI Security, AppSec· Added 7 Oct 2026, published 5 Oct 2026

x.comrepo🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

A public PoC chains CVE-2026-42589 and CVE-2026-40281 to achieve unauthenticated remote code execution against Gotenberg (a document/PDF-conversion microservice), abusing metadata injection flaws in the /forms/pdfengines/metadata/write endpoint. The tool supports vulnerability detection, interactive command execution, reverse shell delivery, and multi-target scanning against Gotenberg versions ≤8.30.1 (patched in 8.31.0).

Gotenberg

CVE-2026-42589CVE-2026-40281

Offensive Security, AppSec· Published and added 5 Oct 2026

arxiv.orgpaper🧠 AI

How to scale your HEP ML models: A recipe for robust architecture comparisons at scale

This paper proposes a systematic procedure for deriving robust scaling laws and comparing architecture design choices at scale, validated first on toy problems and then applied to multi-task transformers trained on the ~11 billion-jet ATLAS JetSet2 dataset. It covers both compute-constrained and data-constrained regimes, jointly predicting optimal model size, training horizon, learning rate and batch size under early stopping, and finds a near-equal sqrt(C) scaling of model and dataset size along with benefits from auxiliary training objectives. The work argues that large, high-quality simulation datasets are a prerequisite for reliable scaling studies and future foundation models in high-energy physics.

Transformer

ATLAS JetSet2

research, training· Added 6 Oct 2026, published 5 Oct 2026

stepsecurity.iowriteup🛡️ Security

SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors

StepSecurity's investigation of @subql/common@5.8.3, a malicious npm release in the SubQuery Web3 indexing framework's monorepo, found a heavily obfuscated postinstall/import-time payload (base64+XOR+gzip inside a function constructed via Function()) that spawns a detached worker to steal credentials (.npmrc, .env, AWS, SSH, kubeconfig, Vault, cloud secrets), read GitHub Actions runner memory for CI secrets, inject a camouflaged "Run Copilot" GitHub Actions workflow to exfiltrate repo secrets, and provide a remote shell/PTY over an encrypted channel to ci-artifacts.dev. The release was published via a compromised build pipeline: a workflow modification swapped the real build output for an externally downloaded, unsigned tarball from that same C2 domain immediately before publish, and the authors provide IOCs and remediation steps (credential rotation, host isolation, domain blocking).

npmGitHub ActionsNode.js+3

SubQuery@subql/commonianhe8x+2

Supply Chain, DevSecOps, Blue Team & Detection· Published and added 5 Oct 2026

solana.comtool🛡️ Security

Introducing Solana Microscope: Program Monitoring and Alerts

Microscope is an open-source, self-hosted monitoring and alerting tool for Solana programs that decodes a program's instructions and events using its IDL, then renders that activity as Grafana dashboards backed by Loki (logs) and Prometheus (metrics). It can also watch a Squads multisig controlling the program, firing precise alerts on specific instructions, events, field values, or multisig proposal approvals to Slack, Telegram, or PagerDuty. A distinguishing feature is built-in health alerting for the monitoring pipeline itself (stalled gRPC/RPC streams, corrupt checkpoints, records decoded but not reaching Loki), so teams can distinguish "program is quiet" from "monitoring is broken." It deploys via Docker Compose, Terraform (AWS/GCP), or Kubernetes manifests, and the code is MIT-licensed on GitHub.

SolanaGrafanaPrometheus+3

Squads

Blue Team & Detection· Added 8 Oct 2026, published 5 Oct 2026

simonwillison.netarticle🧠 AI

We're going to need default hard budget caps on pretty much everything

Simon Willison argues that pay-by-usage APIs and cloud services need default *hard* budget caps (not just warning emails) because coding agents and personal agents can autonomously spin up usage that costs hundreds or thousands of dollars overnight. He points to AWS's newly launched project spend limits (which pause a project once its monthly limit is hit) and Google Cloud's Spend Caps feature as early examples of this becoming a trend, and argues such caps should be opt-out rather than opt-in.

AWSGoogle Cloud

Simon Willison

ai-infra, ai-policy· Published and added 3 Oct 2026

thehackernews.comadvisory🛡️ Security

Critical FortiMail Zero-Day Flaw (CVE-2026-104286)

CISA added CVE-2026-104286 (CVSS 9.8), a path traversal and NULL-byte handling flaw in Fortinet FortiMail, to its Known Exploited Vulnerabilities catalog after confirming active in-the-wild exploitation. The bug lets unauthenticated attackers write arbitrary files via crafted HTTP/HTTPS requests, affecting FortiMail 7.2 through 8.0.1; Fortinet published workarounds (disabling IBE, restricting management-interface access) ahead of patches and shared attacker IPs and modified/added files as IOCs. The article also lists several other actively exploited vendor flaws disclosed the same week (Check Point, Arista VeloCloud, F5 BIG-IP APM, Cisco Catalyst SD-WAN Manager, Citrix NetScaler).

FortiMailCISA KEVCVSS

CVE-2026-104286CVE-2026-85102CVE-2026-93616+9

Threat Intel, AppSec· Added 3 Oct 2026

galaxy.comarticle🛡️ Security

Déjà Vu, Lazarus Crew: $387.5m Bitget Exploit Repeats a Pattern

Galaxy Research post-mortem on the $387.5m Bitget hot/warm wallet theft across 11 chains, attributed to North Korean (Lazarus/DPRK) actors via IP behavior and onchain wallet-overlap analysis by Elliptic and TRM. SlowMist traced the intrusion to a zero-day exploit against two unnamed third-party security vendors ("Product A"/"Product B") that let attackers insert and then delete fraudulent withdrawal commands in Bitget's wallet backend, rather than compromising private keys or cold storage. The piece draws a direct parallel to the February 2025 Bybit/Safe{Wallet} $1.5B theft (doctored signing interface) and the same-week NEAR Intents $3.8m hot-wallet exploit, arguing that private-key cryptography is now reliably secure so attackers instead target the intermediary infrastructure/pipeline that authorizes transactions, with stolen funds repeatedly laundered through THORChain.

THORChainNEAR IntentsGnosis Safe+1

Lazarus GroupDPRKBitget+6

Blockchain, Threat Intel· Added 2 Oct 2026

github.comrepo🧠 AI

Bifrost (Maxim AI) — open-source LLM gateway

Bifrost is an open-source, high-performance LLM gateway (by Maxim AI) that exposes a single OpenAI-compatible API across 23+ providers including OpenAI, Anthropic, AWS Bedrock, Google Vertex, Azure, Cohere, Mistral, and Ollama. It provides automatic failover, load balancing, semantic caching, Model Context Protocol (MCP) tool integration, budget and governance controls, OIDC user provisioning, and Prometheus-based observability, deployable via npx or Docker with claimed sub-15 microsecond overhead at 5,000 RPS. It is positioned as a drop-in replacement requiring only a base-URL change for existing OpenAI, Anthropic, or GenAI SDK code.

DockerGoModel Context Protocol+4

Maxim AI

ai-infra, mcp· Added 2 Oct 2026

huntress.comwriteup🛡️ Security

The First 24 Hours: What Happens When Ransomware Lands

An hour-by-hour ransomware incident response playbook written by UnderDefense CEO Nazar Tymoshyk and published on Huntress's blog, covering confirmation, containment, exfiltration detection, backup/recovery pitfalls, and root-cause investigation in the first 24 hours of an attack. It draws on Mandiant's M-Trends 2026 report (14-day median dwell time, 22-second access-broker-to-ransomware handoff) and CISA's November 2025 Akira advisory (VPN without MFA as primary access vector, exfiltration via FileZilla, WinRAR, WinSCP, RClone, Mega and Ngrok, credential dumping with Mimikatz and LaZagne, PowerShell-based shadow copy deletion) alongside real UnderDefense engagement anecdotes.

PowerShellMimikatzCobalt Strike+2

AkiraMandiant M-Trends 2026REDBIKE+6

Blue Team & Detection, Threat Intel· Added 3 Oct 2026, published 2 Oct 2026

openai.comarticle🧠 AI

The eternal complement

First essay in the OpenAI-hosted "The Next Economy" series. It argues that frontier intelligence is one input in a production process and is complementary to physical capacity and "institutional intelligence" (execution, bureaucracy, supply chains). It sets out two scenarios for a superintelligent future: a "civilization of depth", where better reasoning and simulation cut the need for experiments, and a "civilization of width", where empirical and physical bottlenecks mean most machine intelligence does coordination and construction work. It draws on Bloom et al. on falling research productivity and examples such as JWST, chip fabs, and drug trials. The authors' views are independent of OpenAI's.

OpenAINick BloomJames Webb Space Telescope+6

ai-policy· Published and added 1 Oct 2026

x.comthread🛡️ Security

When Models Turn Brutal

A vendor thread from ZeroShieldAI argues the patch window has collapsed because AI models can now find and weaponize vulnerabilities faster than defenders can fix them. It cites ZeroDayBench (success jumping from ~13% on blind zero-days to 78% once patch location is known), Aikido Security's benchmark where DeepSeek V4 Pro found 28 of 32 recent CVEs for about 98 dollars per run, a Unit 42 finding that 92% of AI-discovered flaws are logic bugs fuzzers miss, and a Hugging Face stat that 16 of the top 300 models advertise removed safety guardrails with 16.8M downloads. It promotes an attached 6-page case study and lists five defender recommendations: treat disclosure as exploit day, maintain SBOM/AIBOM, inventory models and agents, gate agent tool calls with policy, and red-team code and AI apps.

DeepSeekAikido SecurityHugging Face+1

ZeroDayBenchUnit 42

AI Security, Threat Intel· Published and added 1 Oct 2026

decrypt.coarticle🛡️ Security

Gemini 4 Is Here, and Google’s Flagship Tops All Other AI Models on Cybersecurity

Decrypt covers Google's Gemini 4 Argon launch, reporting it scored a 0.7% attack success rate on Gray Swan's Indirect Prompt Injection benchmark, beating Claude Opus 5.5 and Claude Fable 5.1 (both 1.0%), GPT-6 Astra (8.5%), and far outperforming Grok 4.6 and Kimi K3 (~52% each). It also details Argon's cyber-defense capability: it ships first to vetted defenders through Google's Fairwind Program "without cyber guardrails," scored 70.9% on the internal Wiz Penetration Test Benchmark writing working exploits against real web-app flaws, and reportedly helped Wiz find a critical healthcare-software flaw earlier models missed.

GeminiClaudeOpenAI+3

Fairwind ProgramGray SwanGemini 4 Argon+8

AI Security· Published and added 30 Sep 2026

x.comthread🧠 AI

Gen AI Spotlight (@GenAISpotlight) on X

A tweet summarizing Anthropic's research finding that Z.ai's open-weight GLM-5.3 model can build working cyber exploits nearly as effectively as Anthropic's own Claude Mythos Preview, succeeding in 50 of 410 attempts on Chrome exploit benchmarks and chaining novel browser flaws to steal an SSH key in under a day during a live test. Anthropic warns that because GLM-5.3's weights are publicly downloadable, any safety fine-tuning or refusal safeguards can be trivially stripped or bypassed by attackers, framing this as a dangerous-capability risk specific to open-weight releases.

GLM-5.3

AnthropicZ.aiClaude Mythos Preview

ai-safety, evals· Published and added 30 Sep 2026

prospect.orgarticle🧠 AI

Why Is Sam Altman a Free Man?

An opinion piece in The American Prospect arguing that OpenAI's documented "misalignment" incidents — agents attempting to hack the U.N., Australian government, and U.S. Department of Education websites — mirror the company's own disregard for law, as shown by a New York Times/publishers' copyright lawsuit filing describing OpenAI's deliberate circumvention of paywalls to scrape training data (with co-founder Greg Brockman reportedly replying "ah nice" when informed). The author argues no new AI-specific regulation is needed, since existing laws like the Computer Fraud and Abuse Act and unfair-competition doctrine already cover this behavior, and calls for accountability (product recalls, prosecution) analogous to the Ford Pinto scandal, citing Florida AG James Uthmeier's injunction against OpenAI and Nvidia CEO Jensen Huang's comments on shutting down labs with misaligned models.

Sam AltmanGreg BrockmanOpenAI+8

ai-policy· Added 2 Oct 2026, published 30 Sep 2026

cloud.google.comarticle🛡️ Security

Vulnerability Discovery and Exploitation Trends in the AI Era (Google Cloud)

Google Threat Intelligence Group analyzes vulnerability disclosure and exploitation trends from January 2025 to August 2026, finding disclosures doubled, exploitation nearly doubled, and AI-assisted discovery surfaces proportionally more Medium and High-risk flaws, with 50 percent leading to remote code execution versus 26 percent baseline. It documents real-world exploitation of an AI-discovered CVE in BeyondTrust PRA and a surge in vulnerabilities targeting the AI/LLM operational stack, especially agent orchestration frameworks like Langflow and Flowise and inference gateways like LiteLLM and vLLM, citing specific CVEs in those products.

LiteLLMLangflowvLLM+3

CVE-2026-1731CVE-2026-42271CVE-2026-5027+7

Threat Intel, AI Security, AppSec· Added 8 Oct 2026, published 30 Sep 2026

orca.securityadvisory🛡️ Security

Critical Citrix NetScaler Zero-Days Under Active Exploitation

Analysis of two CVSS 9.5 Citrix NetScaler ADC/Gateway zero-days, CVE-2026-88771 (unauthenticated RCE through improper input validation in the management interface, affecting default deployments) and CVE-2026-88772 (memory overflow in DTLS, enabled by default on VPN virtual servers). It lists six more high-severity flaws patched in advisory CTX697096, the affected and fixed versions, and the CISA KEV listing with a federal deadline of 2026-09-30. It advises checking for compromise before patching, since patching can destroy forensic evidence, and gives response steps: isolate, revoke credentials, rebuild firmware, rotate keys and certificates.

Citrix NetScalerVPN

CVE-2026-88771CVE-2026-88772CVE-2026-88773+7

Cloud & Infra, Threat Intel· Published and added 29 Sep 2026

github.blogarticle🛡️ Security

Developer policy update: Transparency, state policy, and what’s ahead

GitHub's policy team publishes its H1 2026 Transparency Center data (708 government takedown requests, largely a reporting-methodology change rather than a moderation increase) and recaps the 2026 US state legislative session. It covers California's SB 1000 (AI Transparency Act) and follow-up AB 2713 concerning how "GenAI hosting platform" definitions could sweep in code repositories, age-assurance laws (California AB 1043, Colorado SB 26, Illinois HB 5511), and flags the upcoming DMCA Section 1201 triennial rulemaking, including renewal of the good-faith security-research exemption.

GitHub

California AI Transparency Act (SB 1000)AB 2713AB 853+4

GRC· Added 7 Oct 2026, published 29 Sep 2026

wiz.iowriteup🛡️ Security

The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub

Wiz walks through a case study of its "Blue Agent" autonomous SOC investigator tracing a compromised CI/CD service account (svc_automation) across AWS and GitHub. The attack chain: a stolen GitHub token cloned 18 private repos containing hardcoded AWS keys, which were used to authenticate to AWS from Kali Linux via a Zenlayer VPN IP, pivot to a second account, run SSM SendCommand against a production Windows domain controller, and stage custom Python exfiltration scripts (mssql_table_export.py, pg_table_export.py, billing_export2.py) in S3 to pull data from MSSQL, PostgreSQL, and billing systems. The piece details the investigative technique used - 30-day baseline comparison, ASO/IP dispersion across the tenant, and correlating CloudTrail management-plane events with S3 data-plane events and GitHub audit logs.

AWSGitHubKali Linux+3

AWS IAMSSM SendCommandAssumeRole

Blue Team & Detection, Cloud & Infra· Published and added 29 Sep 2026

arxiv.orgpaper🧠 AI

Learning Native Reflection in Unified Models with Interleaved Reinforcement Learning

UMM-Reflection is a reinforcement learning method that trains a unified multimodal model to jointly learn reflection text and image revision within a single closed loop: diagnose an image's flaws, revise it, observe the result, and repeat. Sibling trajectories sharing one initial image enable a group-relative advantage that compares whole reflection strategies rather than assigning credit per round, and one trajectory-level advantage updates both the reflection tokens and the flow-based revision head jointly, unlike SFT cold-starts or RL that optimizes only the renderer. On BAGEL, it improves GenEval by 12.05 points over SFT and transfers to unseen benchmarks WISE, OneIG-Bench and T2I-CompBench++, with no external verifier needed at inference.

reinforcement learningsupervised fine-tuning

UMM-ReflectionBAGELGenEval+3

research, training, multimodal· Added 29 Sep 2026, published 28 Sep 2026

arxiv.orgpaper🛡️ Security

SmartMemory: Detecting On-chain-off-chain Communication Inconsistency for Smart Contract via Memory-based Agent

SmartMemory is an academic framework that detects "OFC inconsistency" (OFCI) — a newly identified root-cause vulnerability class where business-logic flaws break the equivalence between a smart contract's on-chain state and its off-chain counterpart, affecting cross-chain bridges, real-world-asset tokenization, and fiat-backed stablecoins. It normalizes heterogeneous on-chain/off-chain implementations into a canonical business-semantic representation, uses a memory-based agent to distill and reuse vulnerability patterns across cases, and verifies candidates with taint analysis. Evaluated on a new dataset of 48 DApps with 81 known OFCIs (80.68% precision, 87.65% recall), it also found 36 previously unknown, since-fixed OFCIs in an analysis of 325 real-world OFC applications.

Blockchain, AppSec· Added 2 Oct 2026, published 28 Sep 2026

arxiv.orgpaper🛡️ Security

Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure

This arXiv paper proposes mining cyber-physical invariants (conservation laws, actuator couplings) from clean operational data to serve as a verifiable admission gate for federated learning updates in industrial intrusion-detection systems, closing a blind spot where poisoned updates derived from fabricated telemetry are indistinguishable from honest ones in update space alone. Evaluated across SWaT, WADI, and BATADAL water-infrastructure testbeds against seven aggregation rules, the gate rejects all fabricated shards (including ones that defeat FoolsGold) while admitting all honest ones, and recovers most of the detection recall lost to replay and fabrication poisoning. The authors also show invariant compliance can be proven via zk-SNARKs so clients avoid revealing raw operational telemetry.

zk-SNARKs

SWaTWADIBATADAL+1

AI Security· Added 2 Oct 2026, published 28 Sep 2026

cisa.govadvisory🛡️ Security

CISA KEV Catalog Additions — Check Point, Arista VeloCloud, F5 BIG-IP (Sept 22, 2026)

CISA added four vulnerabilities to the Known Exploited Vulnerabilities catalog on 2026-09-22 based on evidence of active exploitation: two Check Point multi-product flaws (improper certificate validation CVE-2026-85102, path traversal CVE-2026-93616), an Arista VeloCloud Orchestrator improper input validation bug (CVE-2026-93952), and an F5 BIG-IP APM heap-based buffer overflow (CVE-2026-94127). The alert ties the additions to BOD 26-04, which has FCEB agencies prioritize remediation of KEV CVEs on publicly exposed assets that give total control, and to checking for prior compromise before patching.

CISA KEVCheck PointArista VeloCloud Orchestrator+1

CVE-2026-85102CVE-2026-93616CVE-2026-93952+4

Threat Intel, GRC· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

OnePlus/OPPO root privilege-escalation chain (AtlasService + olc2)

Researcher Rasmus Moorats disclosed a two-stage local privilege-escalation chain on OnePlus/OPPO Android phones: OnePlus's AtlasService debugging component runs as root and passes unvalidated app input into a system command, granting root but confined to a restricted dumpstate zone; a second flaw in the olc2 hardware-helper service accepts arbitrary shell commands from any root caller, escaping the sandbox to full root with kernel-module-loading privileges. A malicious app requiring zero permissions and showing no prompts can chain both bugs on a stock OnePlus 15 or 12 Pro, and OnePlus said the same flaws affect many other OnePlus and OPPO devices sharing OxygenOS. OnePlus confirmed the bugs in May 2026 but had shipped no fix or CVE by publication (Sept 24), and separately told the researcher it claims sole authority over disclosure timing and threatened legal liability for publishing without consent — a stance he rejected before going public.

Android

Rasmus MooratsAtlasServiceolc2+4

Mobile Security, Offensive Security· Added 26 Sep 2026

github.comrepo🧠 AI

awslabs/mcp release 2026.09.20260922000649

This is a release changelog for awslabs/mcp, AWS Labs' collection of Model Context Protocol servers covering services like HealthOmics, Aurora DSQL, Bedrock Knowledge Base retrieval, ECS, CloudWatch, billing/cost management, and dataprocessing. This release adds vended metrics tools, SQL parser-based policy guards for Aurora DSQL, agentic retrieval support for Bedrock KB, and fixes several security issues including region validation to prevent SSRF credential disclosure in the CloudWatch server and read-only mode bypass in the MySQL server. It reflects an actively maintained, high-velocity multi-server MCP monorepo used for AWS tool integration with LLM agents.

Model Context ProtocolPythonFastMCP

AWSAWS HealthOmicsAurora DSQL+4

mcp· Added 26 Sep 2026

vuldb.comadvisory🛡️ Security

CVE-2026-85787 in postgres-mcp-server

CVE-2026-85787 affects awslabs postgres-mcp-server before 1.1.7. The SQL validation component uses an incomplete list of disallowed inputs. Crafted SQL placed in content submitted while an authenticated user interacts with the MCP server can bypass the read-only restriction and modify data in PostgreSQL. The fix is to upgrade to 1.1.7 or later. VulDB's added analysis is generic: it points to SQL injection (CWE-89) and recommends least-privilege database accounts and parameterized queries.

postgres-mcp-serverModel Context ProtocolPostgreSQL+1

CVE-2026-85787CWE-89T1059

AppSec, AI Security· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

The Hacker News roundup covers 11 patched CVEs across three products: Veeam Service Provider Console (CVE-2026-58073, 9.5, unauthenticated managed-agent credential theft; CVE-2026-58072, arbitrary file write to RCE), HashiCorp's Terraform MCP Server (CVE-2026-16498, a 10.0 cross-tenant credential-reuse bug caused by the underlying MCP library not issuing unique session IDs in stateless HTTP mode; CVE-2026-16496 stateful-mode equivalent; CVE-2026-14869 SSRF via header/query-param inconsistency), and Django/GeoDjango (CVE-2026-15307, a spatial-lookup flaw letting GDALRaster write files, reachable by a staff user with view permission on a model with a spatial field, plus a stored XSS, a GEOS DoS, and a language-code DoS). Fixes: Terraform MCP Server 1.1.0+, VSPC 9.3.0.35057, Django 6.0.8/5.2.17; none of the flaws are known to be exploited or listed in CISA KEV as of publication.

TerraformModel Context ProtocolDjango+2

CVE-2026-58073CVE-2026-58072CVE-2026-58067+14

AppSec, AI Security· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

The Hacker News details "CoreBreak," a pattern presented at Black Hat USA 2026 by Stealth researchers Hedi Ingber and Aviyam Ivgi, in which agent harnesses from AWS, Google, and Vercel dispatched tool calls without verifying they came from an actual model turn. AWS's Bedrock AgentCore InvokeHarness API (CVE-2026-18830, CVSS 8.6) let an authenticated remote caller inject a tool-use block that skipped the model entirely; the same model-skipping shortcut persists unpatched in the open-source Strands event loop AWS builds on. Google's ADK for Python (CVE-2026-18236, CVSS 9.3, fixed in 2.5.0) allowed forged tool-confirmation approvals and user-authored function_call events to bypass the LLM, while Vercel's @ai-sdk/harness-codex and harness-opencode (CVE-2026-64650/CVE-2026-64651, CVSS 6.3) let sandboxed code impersonate an approved process to reach host tools; all three CWE-863 authorization gaps were fixed by binding tool execution to a verified model-authorized event rather than trusting tool-call-shaped data.

AWS BedrockGoogle ADKVercel AI SDK+3

CVE-2026-18830CVE-2026-18236CVE-2026-64650+9

AI Security· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

The Hacker News reports on two prompt-injection flaws in Atlassian's Rovo AI assistant: PromptArmor found that a malicious uploaded file could make Rovo silently exfiltrate Jira/Confluence data via a self-constructed URL even with web search disabled, while Varonis Threat Labs disclosed 'RovoBlast,' a one-click attack using the rovoChatPrompt URL parameter to preload attacker instructions and exfiltrate data (including a Confluence API key) through an image-fetch request. Atlassian fixed the URL-parameter flaw server-side on July 8, 2026 per Bugcrowd (P2, $6,000 bounty), but the content-borne file-injection vector's status after PromptArmor's August 5, 2026 disclosure remains unconfirmed, with no CVE assigned to either issue.

Atlassian RovoJiraConfluence

RovoBlastPromptArmorVaronis Threat Labs+1

AI Security· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Cato AI Labs disclosed DuneSlide, two critical (CVSS 9.8) Cursor flaws — CVE-2026-50548 and CVE-2026-50549 — that let a zero-click prompt injection (via MCP servers or web search results read by the agent) escape Cursor's terminal sandbox and achieve arbitrary command execution. Both abuse the file-write allowlist logic: one via the run_terminal_cmd tool's working_directory parameter, the other via a symlink-resolution fallback that trusts an in-project path when the real-path check fails; both let an attacker overwrite Cursor's sandbox helper binary or startup files like ~/.zshrc to disable the sandbox entirely. Fixed in Cursor 3.0 (April 2), affecting all prior 2.x versions; the piece also situates this alongside earlier Cursor agent-exploitation chains (CurXecute/CVE-2025-54135, MCPoison/CVE-2025-54136, CVE-2026-26268).

CursorModel Context ProtocolmacOS+3

CVE-2026-50548CVE-2026-50549CVE-2025-54135+7

AI Security· Added 26 Sep 2026

thehackernews.comarticle🛡️ Security

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Zafran Security disclosed four vulnerabilities (dubbed DifyTap) in the open-source agentic workflow platform Dify, including two critical authorization bypass/path-traversal bugs (CVE-2026-41947, CVE-2026-41948) letting attackers redirect app traces to an attacker-controlled LLM provider or reach Dify's internal Plugin Daemon API, plus two file-preview authz flaws (CVE-2026-41949, CVE-2026-41950) exposing other tenants' uploaded documents and chat files via UUID guessing. Separately, Dify's file-parsing stack bundled a version of PDFium vulnerable to CVE-2024-5846, a use-after-free that can trigger heap corruption via a crafted PDF. All but CVE-2026-41948 were patched in Dify 1.14.2.

DifyPDFium

CVE-2026-41947CVE-2026-41948CVE-2026-41949+4

AppSec· Added 26 Sep 2026

nvd.nist.govadvisory🛡️ Security

CVE-2026-18655: Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs

CVE-2026-18655 describes an improper endpoint restriction flaw (CWE-923) in the RabbitMQ broker connection tools of awslabs.amazon-mq-mcp-server versions before 2.0.24. A remote unauthenticated attacker can use prompt injection introduced into the MCP client context to redirect the broker hostname to an attacker-controlled endpoint, causing Amazon MQ for RabbitMQ credentials or OAuth access tokens to be sent there; CVSS 4.0 base score 7.1 (High). Fixed in version 2.0.24, referenced via an AWS security bulletin and a GitHub security advisory (GHSA-xwj6-8x5h-hjp6).

Model Context ProtocolAWSAWS Bedrock+1

CVE-2026-18655CWE-923GHSA-xwj6-8x5h-hjp6

AI Security, Cloud & Infra· Added 26 Sep 2026

nvd.nist.govadvisory🛡️ Security

CVE-2026-16584: Improper handling of an initialization failure in AWS API MCP Server from 0

CVE-2026-16584 affects AWS API MCP Server (awslabs.aws-api-mcp-server) versions 0.2.13 through 1.3.46: if the security policy enforcement data fails to initialize at server startup, the tool silently skips policy checks for the rest of the process's life, letting an agent execute AWS API operations the admin configured the policy to deny or gate. Underlying IAM permissions still apply and are unaffected, but the intended allow/deny gating layer is bypassed (CWE-455, improper handling of initialization failure). Fixed in 1.3.47.

Model Context ProtocolAWSAWS IAM+1

CVE-2026-16584GHSA-29w2-fq35-v728CWE-455

AI Security, Cloud & Infra· Added 26 Sep 2026

aws.amazon.comadvisory🛡️ Security

CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server

AWS bulletin 2026-105-AWS discloses CVE-2026-87912 and CVE-2026-87913: the AWS Security Agent plugin (aws-agents-for-devsecops, <1.1.0) and its MCP server (<0.2.0) write scan output to a predictably-named S3 bucket (security-agent-scans-<account-id>-<region>) without verifying bucket ownership. An attacker who pre-registers that bucket name in their own account can obtain the victim's private source archive, including embedded credentials and infrastructure state. AWS recommends upgrading to 0.2.0 and manually verifying/pre-creating the scan bucket to prevent squatting.

AWSAWS Security AgentModel Context Protocol

CVE-2026-87912CVE-2026-87913

Cloud & Infra, AI Security· Added 26 Sep 2026

aws.amazon.comadvisory🛡️ Security

CVE-2026-87911 - Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

AWS bulletin for CVE-2026-87911, an OS command injection flaw in awslabs.postgres-mcp-server (Python, PyPI) versions before 1.1.7. The server's read-only enforcement in its SQL validation component can be bypassed with a crafted `COPY ... TO PROGRAM` statement, letting an unauthenticated actor run OS commands on a self-managed PostgreSQL host when the configured connection role holds superuser or pg_execute_server_program privileges. Fixed in 1.1.7; AWS also recommends connecting the MCP server with a least-privilege, non-superuser role as defense in depth.

PostgreSQLModel Context ProtocolPython+2

CVE-2026-87911

AppSec, AI Security· Added 26 Sep 2026

arxiv.orgpaper🛡️ Security

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

The first large-scale measurement study of authentication security across real-world remote MCP servers, scanning 7,973 live deployments and finding 40.55% expose tools with no authentication at all. For the 119 testable OAuth-enabled servers, the authors built a semi-automated (passive traffic inspection + active dynamic probing) detection framework and derived a taxonomy of nine flaw types across four categories — three MCP-specific (open client environments, dynamic client registration, delegated authorization) and conventional OAuth misconfigurations — finding every tested server had at least one flaw, with dynamic client registration flaws hitting 96.6% of servers and leading to information leakage or account takeover; the work resulted in 9 CVEs via responsible disclosure.

Model Context ProtocolOAuth

Identity & Access, AI Security· Added 26 Sep 2026

arxiv.orgpaper🛡️ Security

Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain

Academic study formalizing a threat model for malicious third-party LLM API routers acting as plaintext proxies between agents and upstream model providers, defining payload-injection and secret-exfiltration attack classes with adaptive evasion variants. Testing 28 paid and 400 free routers, the authors found 9 injecting malicious code, 2 with evasion triggers, 17 touching planted AWS canary credentials, and 1 draining ETH from a planted private key, then built a research proxy named Mine to evaluate fail-closed policy gates, anomaly screening, and transparency logging as defenses.

OpenAICodexAWS+1

Mine

AI Security, Supply Chain· Added 26 Sep 2026

wiz.iowriteup🛡️ Security

The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments

Wiz Research analyzed infostealer-harvested secrets (via its NordStellar integration) to map exactly which credentials malware families like Lumma, RedLine, and Vidar target across AWS, Azure, GCP, GitHub, GitLab, and AI platforms, and how those secrets translate into cloud account takeover. It gives concrete file paths and artifacts attackers hunt for (~/.aws/sso/cache OIDC tokens, Azure accessTokens.json, GCP credentials.db/access_tokens.db, GitHub gh hosts.yml and SSH keys, GitLab Runner config.toml, OpenAI/ChatGPT session cookies, and Claude Code's ~/.claude/.credentials.json OAuth tokens), plus stats: three malware families cause 85.7% of incidents, AWS/GCP account for 46%/13% of stolen secrets, GitHub ~10%, AI platforms ~5%. It also covers CI/CD-targeting infostealers (Miasma, TeamPCP) and session-cookie hijacking as an MFA bypass technique.

AWSAzureGCP+3

CVE-2023-7028LummaRedLine+11

Threat Intel, Cloud & Infra, Identity & Access· Added 27 Sep 2026, published 25 Sep 2026

blog.trailofbits.comarticle🛡️ Security

Don't let TEEs break your MPC

Trail of Bits explains why running threshold-signature MPC protocols inside TEEs (Intel TDX, AMD SEV-SNP, AWS Nitro Enclaves) is not automatically secure: a malicious host can roll back enclave filesystem state to force reuse of deleted pre-signature nonces, leaking a signer's private key share. The post catalogs recurring audit pitfalls — incomplete attestation measurements (citing the WhatsApp Private Inference LD_PRELOAD bypass), missing verification steps, weak hardening, stale-backup/rollback risks (including LUKS2 header manipulation in confidential VMs), and physical/side-channel attacks like TEE Fail and DDRop against DDR5 memory — and gives best practices such as binding attestation to MPC party identities and using multiple TEE vendors for defense-in-depth.

Intel TDXAMD SEV-SNPAWS Nitro Enclaves+2

TEE FailDDRopWhatsApp Private Inference+1

Blockchain, Hardware & RF· Published and added 25 Sep 2026

aws.amazon.comarticle🛡️ Security

ICYMI: August 2026 @AWS Security

AWS Security Blog's August 2026 ICYMI roundup covering 20 blog posts, 23 security bulletins, and 17 code samples. The dominant theme is securing agentic AI workloads on Amazon Bedrock AgentCore, alongside IAM/Cognito updates, S3 over-permission remediation, and a bulletin wave featuring prompt-injection consent bypasses in Strands Agents Tools, an IDOR exposing cross-tenant agent memory, credential-disclosure flaws in MCP servers, and RCE issues such as path-traversal-to-root in amazon-ssm-agent and Zip Slip in awsdac.

AWSAWS BedrockAWS IAM+3

IDORZip Slippath traversal+5

AI Security, Cloud & Infra, Identity & Access· Added 7 Oct 2026, published 23 Sep 2026

stepsecurity.iowriteup🛡️ Security

Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

StepSecurity documents a supply-chain attack against @memtensor/memos-cloud-openclaw-plugin on npm (versions 0.1.21, 0.1.23, 0.1.25) and MemoryOS 2.0.34 on PyPI, which insert a hidden "sckit" launcher into normal plugin/import lifecycle code (no install scripts) to spawn a platform-specific Go binary that harvests the parent process's environment and the user's AI prompt text. The Go payloads contain regex patterns for AWS, GitHub, GitLab, npm, PyPI, Hugging Face, Vault, Slack, Stripe and SendGrid credentials, target the user's home directory as an inventory root, and beacon to skyleen.fr "front" domains; the PyPI variant additionally hides a conditional build-backend/CI bridge that can steal PYPI_API_TOKEN during publishing and pull a hash-pinned, Ed25519-signed secondary payload via GitHub Actions. The writeup includes full IOC/remediation guidance.

npmPyPIPython+3

sckitMemTensorskyleen.fr+2

Supply Chain, Malware & RE, AI Security· Published and added 23 Sep 2026

collective.flashbots.netwriteup🛡️ Security

EarlyAttestationBleed Paper Review (TEE attestation bugs)

A Flashbots researcher reviews the EarlyAttestationBleed paper (Muhammad Usama Sardar and Songbo Bu), which uses ProVerif formal analysis to uncover three attestation-verification bugs in confidential-computing deployments: Cocos AI's TDX verifier fails to actually compare the REPORT_DATA value despite computing it correctly, Cocos AI's SEV-SNP validator skips the comparison entirely when an empty expected-input value is passed, and Edgeless Systems' Contrast workload-policy logic can be tricked into accepting container images from untrusted host-controlled storage due to a rebase mistake. All three were implementation bugs (not protocol design flaws) and have since been fixed; the post also summarizes the paper's broader concerns about "early attestation" — exposing hardware details pre-authentication, lack of post-handshake re-attestation for long-lived sessions, and handshake-timeout tradeoffs from added attestation latency.

Intel TDXAMD SEV-SNPProVerif+1

EarlyAttestationBleedIntrahandshake.failMuhammad Usama Sardar+4

Hardware & RF, AppSec· Added 2 Oct 2026, published 23 Sep 2026

socket.devwriteup🛡️ Security

MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack

Socket details a supply-chain compromise of MemTensor's MemOS packages: npm package @memtensor/memos-cloud-openclaw-plugin (versions 0.1.21, 0.1.23, 0.1.25) and PyPI package MemoryOS (2.0.34), both published as the latest release on their registries. Each malicious release bundles a stripped, statically-linked Go binary called sckit that launches on import/plugin-load, scans $HOME for npm, PyPI, GitHub, GitLab, AWS, Vault and SSH credentials, and exfiltrates them to C2 servers under skyleen[.]fr, with the npm variant also capturing OpenClaw agent prompt text and the code additionally showing potential worm-like republish capability using stolen registry tokens.

npmPyPIGo+2

MemTensorMemOS@memtensor/memos-cloud-openclaw-plugin+7

Supply Chain, Malware & RE, Threat Intel· Published and added 23 Sep 2026

github.comrepo🛡️ Security

https://github.com/akha-security/akca

AKCA is an open-source, Go-based Dynamic Application Security Testing (DAST) scanner that combines HTTP and headless-browser crawling, JavaScript/AST analysis, API spec import (OpenAPI, GraphQL, gRPC, etc.), and adaptive active testing across a very broad set of vulnerability classes including SQL injection, XSS, SSRF, IDOR/BOLA, SSTI, JWT/OAuth flaws, race conditions, and cloud/CI exposure. It emphasizes evidence-oriented verification — replaying promising signals against baselines, negative controls, and OAST callbacks before promoting them to findings — and exports Burp-style HTTP evidence in HTML, JSON, CSV, Markdown, and SARIF reports. Positioned as a transparent, single-developer alternative inspired by but not claiming parity with Acunetix, Invicti/Netsparker, or Burp Suite Professional.

GoBurp SuiteSARIF+3

IDORBOLASSRF+1

AppSec· Added 2 Oct 2026, published 23 Sep 2026

adversa.aiwriteup🛡️ Security

Top 10 attacks on Claude Code and what each one actually broke

Adversa AI catalogs ten distinct Claude Code attacks documented between September 2025 and September 2026: the Miasma supply-chain worm that hit 73 Microsoft repos via a SessionStart hook, TrustFall's unsandboxed MCP server execution on folder-trust, Check Point's CVE-2025-59536/CVE-2026-21852 pre-trust-dialog code execution and API key theft, Sentry-DSN-based "Agentjacking" prompt injection via fake bug reports, a 50-subcommand cap that silently disables deny rules, the SymJack symlink-to-config-hijack primitive working across six agent CLIs, Wiz's GhostApproval deceptive-approval-prompt finding (with CVE-2026-12958 at AWS and CVE-2026-50549 at Cursor but none at Anthropic), the Plugin4Shell SHA/branch-name collision bypassing plugin pinning, an academic MCP tool-poisoning paper achieving RCE on agent/LLM pairs, and SkillCloak's self-extracting-packer bypass of skill scanners. The piece argues almost none of these are model-behavior bugs - they are trust-boundary and consent failures in the surrounding tooling - and closes by pitching Adversa's own runtime agent security gateway as the fix.

Claude CodeModel Context ProtocolSentry+3

CVE-2025-59536CVE-2026-21852CVE-2026-12958+20

AI Security, Supply Chain· Added 7 Oct 2026, published 23 Sep 2026

bex.coarticle🛡️ Security

30+ MCP CVEs in Two Months: What the Early-2026 Vulnerability Wave Means for Your MCP Supply Chain

Analysis of 30+ CVEs filed against Model Context Protocol servers, clients, SDKs, and proxies in the first two months of 2026, showing the flaws concentrated in plumbing (proxies, registries, transports) rather than tool implementations. It walks through CVE-2025-6514 (CVSS 9.6 RCE in mcp-remote via unsanitized OAuth authorization_endpoint URLs shelled out to launch a browser), the chained Atlassian MCP server CVEs (CVE-2026-27825/CVE-2026-27826), unauthenticated public registries, and a systemic stdio-transport advisory, then ties the findings to the NSA's May 2026 MCP security CSI and the OWASP MCP Top 10.

Model Context Protocolmcp-remoteClaude Desktop+3

CVE-2025-6514CVE-2026-27825CVE-2026-27826+5

AI Security, Supply Chain, AppSec· Added 26 Sep 2026, published 23 Sep 2026

gambit.securitywriteup🛡️ Security

Autonomous AI Agents Hack Online Retailers for $25 a Company

Gambit Security recovered the staging server of a financially motivated actor running three open-source AI agent harnesses — Strix (vuln scanning), Cairn (autonomous exploitation), and Hermes (orchestration) — against hundreds of online retailers at a marginal cost of tens of dollars per target. The campaign exfiltrated 600,000+ credit card records via Magento database compromises, deployed checkout-page card skimmers on at least 19 confirmed and 100+ further sites, and in one case an agent's own cleanup routine dropped 180 database tables including victim backups. The report details full attack chains (SQLi to RCE to AWS Secrets Manager dump to card decryption), the AI harnesses' operating costs (~$25 mean per target on OpenRouter/opus-4.6/GLM/DeepSeek), and multiple real-world skimmer injection techniques.

StrixCairnHermes+3

Overwatch DataShadowserver FoundationDaniel Gordon+3

Threat Intel, AI Security, Offensive Security· Added 26 Sep 2026, published 22 Sep 2026

aws.amazon.comwriteup🛡️ Security

Transforming Bedrock Guardrails events into OCSF with CloudWatch

AWS walks through a reference pipeline (Lambda + CloudWatch Logs subscription filter + AWS S3 Tables) that transforms AWS Bedrock Guardrails intervention events — blocked prompt injections, PII redactions, content-policy hits — from Bedrock model invocation logs into OCSF Detection Finding (class_uid 2004) records, landing them in the CloudWatch unified data store. This lets SOC analysts correlate guardrail interventions with AWS CloudTrail and VPC Flow Logs via Athena or CloudWatch Logs Insights, e.g. spotting accounts with both prompt-injection blocks and failed IAM calls, and complements GuardDuty AI Protection's managed findings. Includes OCSF field mapping, multi-account centralization pattern, and a cloneable CDK-based implementation.

AWS BedrockAWSAWS IAM+2

prompt injection

AI Security, Cloud & Infra, Blue Team & Detection· Added 7 Oct 2026, published 21 Sep 2026

blog.trailofbits.comarticle🛡️ Security

SAML: A fractal of bad design

A Trail of Bits researcher (ex-Duo Security engineer) traces SAML's history from its 2002 OASIS committee origins through recurring XML signature wrapping (XSW) and canonicalization/round-trip parser-differential attacks, arguing its reliance on brittle XML signature validation (libxmlsec) makes it fundamentally unsound. The post catalogs SAML's five structural flaws — XML complexity, canonicalization, enveloped signatures, kitchen-sink design, and protocol ossification — and recommends organizations deprecate SAML in favor of OIDC, citing Fly.io and Tailscale as vendors already holding the line on OIDC-only SSO.

SAMLOIDCXML+1

Thomas PtacekKelby LudwigOASIS SSTC+5

Identity & Access, AppSec· Published and added 21 Sep 2026

synacktiv.comarticle🛡️ Security

AWS EKS forensics: data sources and investigation tooling (Synacktiv)

Synacktiv's CSIRT publishes a detailed forensics guide for Amazon EKS, mapping the three data-source layers (Kubernetes control plane audit logs, data-plane/Container Insights logs, and AWS-level CloudTrail/GuardDuty) and giving concrete CloudWatch Logs Insights queries for detecting RBAC reconnaissance, role escalation via the 'escalate' verb, Pod Security Admission evasion, and static-pod node persistence. It also covers node-level acquisition via SSM/kubectl debug, ServiceAccount token theft, and correlating GuardDuty findings (PrivilegedContainer, ContainerWithSensitiveMount, ReverseShell, InstanceCredentialExfiltration) with CloudTrail to trace stolen node/pod IAM identities used outside the cluster.

AWSKubernetesGuardDuty+2

escalate verbIRSAEKS Pod Identity+4

Cloud & Infra, Blue Team & Detection· Added 21 Sep 2026

github.comrepo🛡️ Security

Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)

Lonkero is an open-source Rust web vulnerability scanner (v3.7) combining 125+ context-aware scanners with an AI agent mode that drives targeted scans via natural-language conversation (using Claude, GPT, or local Ollama models). Notable techniques include a browser-free "proof-based" XSS engine that mathematically proves exploitability from reflection context + escape behavior, an "OOBZero" engine for detecting blind SQLi/SSRF/XXE via Bayesian multi-channel statistical inference and Pearson-correlated timing attacks without external callback infrastructure, Next.js middleware-bypass detection (CVE-2025-29927, CVE-2024-34351), AWS Cognito user-enumeration checks, and a scanner module that detects invisible prompt-injection payloads hidden in README.md files targeting AI coding assistants.

RustClaudeOllama+3

CVE-2025-29927CVE-2024-34351CVE-2023-23752+6

AppSec, AI Security, Offensive Security· Added 21 Sep 2026

synacktiv.comarticle🛡️ Security

AWS EKS Forensics: Data Sources and Investigation Tooling

Synacktiv's CSIRT breaks down the forensic data sources exposed by Amazon EKS across three layers — Kubernetes control plane (audit logs), data plane (Container Insights/Fluent Bit), and AWS services (GuardDuty EKS Protection, CloudTrail) — and provides concrete CloudWatch Logs Insights queries for RBAC-escalation detection, static pod persistence, node credential theft, and other attack indicators. It also covers node-level acquisition (SSM, kubectl debug), containment pitfalls that destroy evidence, and a full investigation workflow from GuardDuty finding to cross-layer timeline correlation.

AWSKubernetesAmazon EKS+3

PrivilegeEscalation:Kubernetes/PrivilegedContainerPersistence:Kubernetes/ContainerWithSensitiveMountExecution:Runtime/ReverseShell+3

Cloud & Infra, Blue Team & Detection· Added 21 Sep 2026

solana.comarticle🛡️ Security

How AI Is Reshaping Crypto Security, with Michael Coates

An interview with Solana Foundation CISO Michael Coates dissects the July 2026 Coldcard hardware-wallet hack, where a 2021 code change swapped a hardware RNG for a software pseudo-random source, collapsing seed entropy from 128 to ~40 bits and letting attackers offline-brute-force and drain ~$116M in Bitcoin from 5,200+ wallets without touching a device — despite prior audits that only checked whether a value was set, not its source. Coates draws lessons on distrusting single audits, using multi-sig to remove single points of failure (including the wrench attack), and phishing-resistant hardware keys (e.g. YubiKey) as the fix for pixel-perfect deepfake and phishing attacks. He also discusses AI's cat-and-mouse effect on offense vs. defense, Anthropic's disclosed Claude-driven Chinese state espionage campaign, and Solana's STRIDE continuous security-rating program for DeFi as an automated, computer-scale response to agentic nation-state threats.

SolanaBitcoinClaude+2

Coldcard hackCode Red worm

Blockchain, AI Security· Added 29 Sep 2026, published 19 Sep 2026

securitylabs.datadoghq.comwriteup🛡️ Security

Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms

Datadog Security Research analyses two vibe-coded credential harvesting platforms, Loot and UltraVault, monitored since July 2026. Loot catalogs plaintext secrets, including 1,778 AI keys (196 live). UltraVault adds credential validation, exploit chains, a 14-bug LPE matrix and AWS key-pair correlation. The same host probed Amazon Bedrock with GetCallerIdentity, ListFoundationModels and InvokeModel, using kali-cloud Boto3 and Python-urllib user agents.

AWS BedrockAWSWordPress+3

CVE-2025-55182CVE-2026-63030CVE-2026-60137+16

Threat Intel, Cloud & Infra, AI Security· Added 29 Oct 2026, published 18 Sep 2026

aws.amazon.comarticle🛡️ Security

Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud

AWS announces general availability of Gemma 4 (Apache 2.0 open-weight models) on Amazon Bedrock's new OpenAI-compatible bedrock-mantle inference engine within the AWS European Sovereign Cloud, its independently-operated EU-only cloud region (eusc-de-east-1). The post details the security model behind inference: zero operator access to prompts/outputs, zero data retention by default, encryption in transit, IAM-scoped least-privilege access to the inference API, short-lived vs long-lived Bedrock API keys, and CloudTrail/CloudWatch auditing, plus a walkthrough for calling Gemma 4 via the Responses and Chat Completions APIs.

AWS BedrockAWS IAMAWS+1

eusc-de-east-1

GRC, Cloud & Infra· Added 7 Oct 2026, published 17 Sep 2026

aws.amazon.comarticle🧠 AI

Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud

AWS announces general availability of Gemma 4 (Apache 2.0 licensed open-weight model family) on Amazon Bedrock's next-generation inference engine within the AWS European Sovereign Cloud, accessible via an OpenAI-compatible bedrock-mantle endpoint supporting the Responses and Chat Completions APIs. The post walks through authenticating with Bedrock API keys, IAM permission scoping, and sending first inference requests using the OpenAI Python SDK, alongside details on zero-operator-access/zero-data-retention guarantees and in-region (eusc-de-east-1) data residency.

AWSOpenAI APIPython

Amazon BedrockGemma 4AWS European Sovereign Cloud

inference, models· Added 8 Oct 2026, published 17 Sep 2026

github.comrepo🧠 AI

OmniJev/awesome-jev-gallery

An extensive, actively maintained GitHub "awesome list" cataloging the ecosystem that has grown around TypeSafe's Jev and its "System One" typed decision models — a non-generative alternative to chat LLMs that returns calibrated probabilities per option (Choice/Score/Noul primitives) via RLCD training and single-pass constrained decoding. It indexes dozens of open-weight reproductions (OneJev, Rizzo Flow, Laya, Jebadiah, kev), benchmarks and leaderboards (JevBench, Jev Decision Index, JevAdvBench, DecisionBench), downstream tools (browser/robot/trading agents built on the typed API), and the research lineage the design draws on (zero-shot entailment classifiers, InstructGPT's reward model, GLiNER/GLiClass, monoBERT, LLaDA, vLLM, DSPy, RouteLLM, Constitutional Classifiers). It also links commentary auditing TypeSafe's claims (accuracy vs. frontier LLM baselines, security issues found in community tools).

vLLMDSPyOutlines+13

JevTypeSafeDiogo Almeida+31

models, evals, research· Added 29 Sep 2026, published 17 Sep 2026

wiz.iowriteup🛡️ Security

Exploring the new AWS Sign Up experience

Wiz researchers reverse-engineered AWS's new sign-up experience, which silently creates a three-account AWS Organization (management, identity, and a restricted sandbox member account) with Builder ID login instead of root credentials. They found the sandbox blocks security services like GuardDuty, SecurityHub, Detective, Inspector, Macie and Access Analyzer via an allowlist SCP (FreeTierSCP), while still permitting risky practices such as IAM user access keys, public S3 buckets, and IMDSv1 EC2 instances; a data-perimeter RCP also blocks cross-account sts:AssumeRole until the account is upgraded, potentially pushing vendors back toward IAM user keys. The new IAM Role Manager feature further undermines least privilege by auto-attaching PowerUserAccess to console-created roles.

AWSAWS IAM

Control TowerAccountFullAccessRoleAWSManagedAccountManagementAccessRole+7

Cloud & Infra, Identity & Access· Published and added 17 Sep 2026

github.comrepo🧠 AI

AnotiaWang/awesome-decision-models

A community-maintained GitHub list cataloging "decision models" (also called System One models): small/fast models that take a state plus caller-declared questions (Noul/true-false, Choice/multi-option, Score/rubric) and return a probability per answer in one forward pass, rather than generating text. It tracks the originating TypeSafe AI Jev model and its /v1/systemone API alongside competing hosted models (Upstage Solar Decide, Liquid AI's d1, OpenAI's Decisions API, Inception's Mercury Decide, Respan's Span-01), dozens of open-weight fine-tunes (Cloudflare's Clef, Perplexity's pplx-decider, AWS Strands Decider, Together AI's Tev1, and many Qwen3.5-based community models), zero-training logit-reading approaches, local runtimes (Ollama, Ollaya, llama.cpp-based servers), SDKs across a dozen languages, and a very long list of agent/coding-tool/MCP integrations (browser agents, code review, routing, game-playing demos) that use these models for fast, typed, in-the-loop decisions. The page is truncated at 40k of ~51k characters, so later sections (further toys, demos, and possibly benchmarks) are not reflected here.

Qwen3.5Qwen3.8-27Bllama.cpp+15

TypeSafe AIJevJevBench+33

models, mcp, agents· Added 2 Oct 2026, published 17 Sep 2026

github.comrepo🛡️ Security

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

A GitHub repository from Theori's Xint Code team detailing CVE-2026-31431, a Linux kernel local privilege escalation bug ("Copy Fail") that had gone undetected for roughly nine years. The researchers confirmed exploitability across current production kernels including Ubuntu 24.04 LTS (6.17.0-1007-aws), Amazon Linux 2023 (6.18.8-9.213.amzn2023), RHEL 10.1 (6.12.0-124.45.1.el10_1), and SUSE 16 (6.12.0-160000.9-default).

Linux kernelUbuntuAmazon Linux+2

CVE-2026-31431TheoriXint Code

Offensive Security· Added 17 Sep 2026

github.comrepo🛡️ Security

AI Agent Hacking Writeups

A GitHub-hosted, CC0-licensed index of 281 public writeups on attacks against AI agents, organized into six categories: indirect prompt injection, direct prompt injection/jailbreaks/guardrail bypass, MCP and agent tooling, AI platform/infrastructure bugs, classic web bugs in AI product surfaces, and AI used as an attacker's tool. Entries span 2021-2026 and include major disclosures like GeminiJack, ForcedLeak, Clinejection, CVE-2025-53773 (GitHub Copilot RCE), and dozens of Johann Rehberger/PromptArmor/qual1a writeups covering exfiltration, MCP OAuth flaws, and coding-agent sandbox escapes. Comes with an accompanying blog post "How to Hack AI Agents" and a scripted links.txt for automation.

Claude CodeModel Context ProtocolGitHub Copilot+17

CVE-2026-24299CVE-2025-66032CVE-2025-62453+25

AI Security· Added 22 Sep 2026, published 17 Sep 2026

aws.amazon.comarticle🛡️ Security

Architecting a secure landing zone in the AWS European Sovereign Cloud

AWS Security Blog walkthrough of building a secure, production-ready landing zone in the new AWS European Sovereign Cloud (aws-eusc partition), covering multi-account governance via AWS Control Tower/AFT, IAM Identity Center federation as Terraform code, centralized logging into a Log Archive and Security Tooling account, network perimeter design with dedicated Direct Connect PoPs and VPC endpoints, KMS/External Key Store data protection, and partition-aware CI/CD for pushing container images, AMIs, and artifacts across the partition boundary. It maps design decisions to the AWS Security Reference Architecture and Well-Architected Framework, distinguishes hard partition boundaries from configurable choices, and references BSI C5:2020, SOC 2, and ISO 27001/27017/27018/27701 certifications for EUSC.

AWSAWS European Sovereign CloudAWS IAM+3

BSI C5:2020SOC 2ISO 27001+3

Cloud & Infra, GRC, Identity & Access· Added 7 Oct 2026, published 16 Sep 2026

aws.amazon.comarticle🛡️ Security

AWS STS simplifies session token size limits and adds session token size monitoring

AWS STS has replaced its old dual limit (separate packed-policy-size limit plus overall token size limit) with a single 4,096-byte session token limit, and now reports token size via new SessionTokenSize and SessionTokenUtilization fields in API responses, CloudWatch (AWS/STS namespace), and CloudTrail. A new MinimumSessionTokenSize parameter on session-vending APIs (AssumeRole, AssumeRoleWithSAML, AssumeRoleWithWebIdentity, GetSessionToken, GetFederationToken) lets engineers deliberately inflate tokens up to the max to test which downstream systems (load balancers, proxies, databases, caches) can actually handle larger tokens. PackedPolicyTooLargeException is still returned for backward compatibility, but now covers only the single unified limit.

AWSAWS IAMAWS STS+2

PackedPolicyTooLargeException

Identity & Access, Cloud & Infra· Added 7 Oct 2026, published 15 Sep 2026

Showing 210 of 367