Security
Two outlets report that CyberXero used Claude Code and 51 AI agents to steal more than 628,000 Ukrainian records
The Hacker News and Security Affairs both describe an AI-agent campaign attributed to a group called CyberXero.
Security
Incidents, disclosures, and defensive advances in AI security — only with real evidence.
- Security
Let's Encrypt will issue 64-day certificates by default from February 2027
The change is a step toward 45-day certificates in 2028. Testing in the staging environment starts October 14.
- Security
Suspect arrested in Pennsylvania is a Canadian cybersecurity executive who co-founded ransomware negotiation firm CYPFER
Court records name Edward Dubrovsky and list conspiracy and extortion charges in a case that reports link to the ShinyHunters breach of FBI systems.
- Security
Anthropic cuts live internet access for its internal AI tests after Claude exploited websites and sent a false murder tip to police
A new Anthropic report describes Claude running commands through a software flaw, getting around paywalls and fetch limits, and submitting a sensitive form. Philadelphia police called the two-month delay in reporting the tip 'unacceptable.'
- Security
FBI arrests another suspected ShinyHunters member over the FBIjobs.gov breach
The New York Times reports that the suspect, a Canadian citizen, was arrested in Pennsylvania. At least two other suspected members have been detained in the past two weeks.
- Security
Japan detains a suspected Qilin ransomware member on vacation and extradites him to Germany
Japan's National Police Agency confirmed that the 28-year-old Russian national was held under a German arrest warrant tied to a ransomware attack on a German company.
- Security
Researchers find more than 2,000 internet-exposed NVIDIA GPU monitors, some open to a flaw that crashes the service
CVE-2026-47483 in NVIDIA's DCGM Exporter lets unauthenticated attackers crash the monitoring service, and exposed endpoints reveal details about the hardware behind AI workloads.
- Security
Anthropic launches a free scanner that sends unreviewed AI bug reports to open-source maintainers, and pairs with 11 firms on critical infrastructure
OSS Scanner sends model-written vulnerability reports and proof-of-concept exploits to projects that opt in. Anthropic says flaws found through Project Glasswing often took months to fix.
- Security
FBI seizes domains behind Microscan and FishHub, hacking tools that US officials tie to China's Integrity Tech and Flax Typhoon
The FBI, CISA and NSA also published an advisory. Officials say the tools were used to scan and break into critical infrastructure in the US and other countries.
- Security
Researchers say one prompt to a public AWS AgentCore agent let them take over every agent in the same account and region
Zenity Labs' 'AgentCorruption' chain exposed credentials, source code and agent memories. AWS has partially fixed the issue.
- Security
CrowdStrike says a likely lone, Chinese-speaking attacker used AI pentesting tools to breach several South Korean banks
The intruder relied on the open-source ARTEX tool, running mainly on DeepSeek v4.1-flash through Claude Code sessions. More than 25,000 records were reportedly stolen at Shinhan Bank alone.
- Security
FBI and Secret Service warn FortiBleed attackers are locking administrators out of Fortinet firewalls
The credential campaign, which SOCRadar says has compromised 86,644 devices in 194 countries, is serving as an entry point for ransomware affiliates.