AI Safety Guidelines: 10 Essential Rules to Protect Data, Finances, and Reputation When Working with LLMs
A detailed analysis of emerging AI-related security risks highlights how large language models can autonomously execute attack chains, fall victim to prompt injection, and cause cascading errors in complex workflows. The article examines real-world incidents such as the Anthropic vending machine pricing failure, the Meta Instagram account takeover via overly helpful AI support, and Copilot Studio data leaks through prompt injection. It emphasizes that while attack methods themselves are not revolutionary, AI agents can now scale them at machine speed with autonomous decision-making and recovery capabilities. The piece provides ten concrete safety rules covering financial controls, fact verification, data confidentiality, context pollution prevention, and access limitation. It also stresses that ultimate responsibility always remains with the human operator, not the AI system.
Translated from Russian
Read full articleLatest News
Four Words Instead of a Password: Why Passphrases Fail Against Real Breaches and Infostealers
Hive Systems' 2026 password cracking table shows an eight-character complex password lasting 132 years under bcrypt, yet human-chosen variants like o#mA24ft fall in three seconds on an RTX 5090. Kaspersky's analysis of 231 million leaked passwords from 2023-2026 reveals 48 percent crack in under a minute and 60 percent within an hour, driven by predictable patterns such as trailing digits, years, and transliterated Russian words. NIST's SP 800-63B-4 update removed mandatory character rules, raised standalone password length to 15 characters, and banned periodic rotation. Diceware passphrases deliver 52 bits with four words and 77.5 bits with six, but only when generated randomly; human-selected phrases from pop culture or song lyrics collapse under dictionary attacks. Infostealers, not offline cracking, dominate theft, with Flashpoint reporting 2.1 billion credentials stolen in cleartext last year. FIDO passkeys reached five billion active keys by May 2026, yet remain vulnerable on compromised devices. The article concludes that passphrases suit only a handful of master secrets while random strings from managers handle the rest.
Translated from Russian
Beget Hosting Provider Advances Recovery After Cyberattack Wipes Cloud Infrastructure
Russian hosting provider Beget has reported significant progress in restoring services following a major cyberattack that struck its infrastructure on the night of November 2, 2026. Attackers gained access to the management layer and executed wiping scripts, resulting in the complete loss of data in VPS, S3, and Kubernetes environments. File-level backups of VPS instances were preserved, allowing the company to begin phased recovery. Beget has now restored more than 50,000 websites along with their SSL certificates and has completed roughly half of the virtual hosting recovery work. The company expects to finish the main restoration phase within three days. Technical support for affected virtual hosting customers has been enabled directly inside the control panel at cp.beget.com/support, though response times are currently longer than usual due to high ticket volume.
Translated from Russian
Evaluating Secure Development Maturity: Comparing BSIMM, DSOMM, SAMM and GOST R 56939-2024
A detailed analysis compares four methodologies for self-assessing secure software development maturity in Russian companies. The review covers BSIMM from Black Duck, OWASP DSOMM, OWASP SAMM and the updated Russian national standard GOST R 56939-2024. Each model was tested through a simulated audit on a fictional company called ООО «Лиса и лосЬ» that uses GitLab, Nexus and SonarQube. The evaluation scored the methodologies on criteria including ease of maturity calculation, recommendation generation, roadmap building, heat-map creation and SDLC coverage. GOST R 56939-2024 and SAMM received the highest total scores of 35 and 34 out of 47. The article concludes that no single methodology covers all needs and recommends combining approaches tailored to specific company contexts.
Translated from Russian
Microsoft Patches Two BitLocker Vulnerabilities Allowing Encryption Bypass via Physical Access
Microsoft released fixes on November 10, 2026, for two BitLocker vulnerabilities that enable attackers with physical access to bypass disk encryption on Windows systems. CVE-2026-119832 carries a CVSS score of 5.9 and stems from an improperly applied access control, allowing low-privileged local users to read protected data from the system drive without user interaction. CVE-2026-97015 scores 6.8 and involves a buffer overflow in dynamically allocated memory, requiring no prior privileges and classified as low attack complexity. Both flaws affect Windows 10 versions 1809, 21H2 and 22H2, multiple Windows 11 releases, and Windows Server 2019, 2022 and 2025 editions across various processor platforms. The issues directly undermine BitLocker's core purpose of protecting lost, stolen or improperly decommissioned devices. Corresponding updates include KB5131096 for Windows 10 21H2/22H2 and KB5131087 for Windows 11 23H2, with administrators advised to verify coverage for CVE-2026-97015 separately.
Translated from Portuguese
Qlik Sense Servers Targeted with Reverse Shell Attacks in October 2026 Campaign
In October 2026, multiple Qlik Sense servers hosted by European Union customers were subjected to attempted reverse shell installations within a three-minute window. The attacks were blocked before execution and originated from a single-line PowerShell command delivered through the Qlik Sense scheduling component. Analysts noted strong similarities to a November 2023 campaign attributed to CACTUS ransomware operators that exploited three specific vulnerabilities: CVE-2023-41265, CVE-2023-41266, and CVE-2023-48365. The observed activity included a Go-based second-stage payload that searched for Apache ActiveMQ processes, harvested local account hashes on Linux, and deployed modified OpenSSH servers for persistence. Infrastructure recovered during the investigation also contained exploits for a 2023 Apache ActiveMQ vulnerability and a 2024 Veeam Backup and Replication flaw, indicating broader targeting intentions. The root vulnerability exploited in the 2026 attempts remains unidentified.
Translated from Portuguese
Rostelecom Suffers Mass Outage Disrupting Website, Mobile App and Personal Account
Rostelecom experienced a significant service disruption that left its official website, mobile application, and customer personal account either unavailable or functioning with errors. The first reports of problems began arriving around 12:40 Moscow time. Over a 24-hour period, the monitoring service Detector404 recorded approximately 2,500 user complaints. The largest share, 59 percent, originated from the Nizhny Novgorod region, followed by 4 percent from Kursk region and 2 percent each from Ryazan and Ivanovo regions. Rostelecom has not issued any official statement regarding the incident, and the root cause along with the timeline for full restoration remain unknown. The outage occurred in the same week that hosting provider ESTT suffered a similar infrastructure failure.
Translated from Russian
Russian State Duma Rejects Bill Proposing Fines for Covering Face in Public
On November 11 the State Duma rejected bill No. 1159193-8 that sought to introduce a new article in the Code of Administrative Offenses punishing appearance in public places with a face covered in a way that prevents identification. The draft included exceptions for medical reasons, official duties, weather conditions, and sports or cultural events. Two committees of the Federation Council on defense and security as well as constitutional legislation opposed the measure. The Duma committee on criminal and administrative legislation found the wording too vague and lacking legal certainty. It also noted that new offenses require prior federal-law prohibitions. On the same day lawmakers rejected another bill introducing criminal liability for crimes committed with deepfakes.
Translated from Russian
GlobalSign Launches New Wave of SSL/TLS Certificate Revocations Targeting Russian Organizations
GlobalSign has initiated another round of revocations affecting SSL/TLS certificates issued to Russian websites, with a total of 11,000 certificates withdrawn from 1,300 organizations so far. The revocations primarily impact entities listed in EU and US sanctions regimes, in line with updated CA/Browser Forum requirements that took effect in May 2026. Greek CA HARICA has also participated in the revocations, sometimes completing the process within seconds and leaving site owners little time to respond. The actions stem from mandatory checks against the OFAC SDN List, BIS Denied Persons List, and equivalent European sanctions databases. Russian authorities recommend obtaining domestic TLS certificates via Gosuslugi within three business days to maintain secure access in foreign browsers. Let's Encrypt has similarly updated its policies to restrict certificates for sanctioned Russian entities while continuing issuance for others.
Translated from Russian
AI Coding Assistants Generate Insecure Code and Amplify Supply-Chain Risks in Production
A detailed analysis of AI coding assistants reveals that generated code contains vulnerabilities in 45% of cases according to Veracode research, with models frequently choosing unsafe options for log injection and XSS. Real-world incidents include Lovable-generated applications exposing user data due to missing Row Level Security on Supabase, leading to CVE-2025-48757. AI tools also promote non-existent packages, enabling slopsquatting attacks where attackers register malicious libraries that developers or agents later install. Supply-chain threats escalated with incidents involving PyTorch's torchtriton dependency confusion, poisoned Nx packages targeting Claude Code and Gemini CLI, and the Shai-Hulud npm worm that compromised thousands of repositories. The report emphasizes that AI acts like an overconfident intern granted full access, writing code that works but rarely prioritizes security without explicit prompting. Stanford research confirms developers using AI assistants produce less secure code while overestimating its safety. Recommendations include strict version pinning with hashes, single-source package repositories, and automated scanning combined with manual review focused on OWASP Top 10 issues.
Translated from Russian
From Russian sources
Translated from Russian
OIDC-Based Push Deployment on VPS Removes SSH Keys from CI While Enforcing Strict Isolation
A new self-hosted deployment system called cd enables secure continuous delivery to single Linux VPS hosts running Docker without storing any long-lived secrets in CI repositories. The architecture relies on short-lived OIDC JWT tokens issued by GitHub Actions or GitLab CI, verified on the target server through JWKS public keys. The server component cdd performs token validation, archive checks, resource-limited builds inside BuildKit, health checks, and automatic rollback on failure. All containers are launched with read-only root filesystems, dropped capabilities, no-new-privileges, and network binding restricted to 127.0.0.1 behind Caddy or Nginx. Administrative control is provided by the cdctl CLI that registers projects, sets RAM/CPU limits, and manages DNS records via Porkbun integration. The entire solution avoids external databases, web panels, and persistent secrets while enforcing one-repository-to-one-application boundaries.
Basis Launches Basis AIR Platform to Optimize Shared GPU Resources for AI Projects
Basis, part of the RTK Data Centers group, has introduced Basis AIR, a platform designed to allocate computing resources across multiple AI initiatives within organizations. The solution targets small, medium, and large enterprises that have invested in expensive GPU hardware but face uneven utilization, with some teams waiting for capacity while others leave accelerators idle. According to the company, Basis AIR can increase accelerator utilization from 30% to 80% by enforcing task priorities, departmental quotas, and dynamic resource sharing. The platform supports running multiple workloads on a single accelerator and allows teams to borrow additional capacity when resources are available. It generates detailed consumption reports by project and division, helping executives decide whether new GPU purchases are truly necessary before approving further hardware acquisitions. Basis AIR is deployed on-premises in the customer’s data center, operates without internet connectivity, and integrates with third-party infrastructure platforms without requiring other Basis products.
30 Tools for Six Core Information Security Tasks: From Recon to Forensics
The article provides a practical guide for system administrators managing a single website, database, and server setup. It covers 30 specific tools across six categories: reconnaissance, web application testing, infrastructure scanning, incident response, digital forensics, and secure development practices. Each section recommends five tools with explanations of their use cases, such as discovering forgotten assets like test2 or analyzing network traffic during off-hours incidents. Tools include Subfinder for passive subdomain enumeration, Burp Suite for request inspection, Nmap for port scanning, Zeek for structured logging, Autopsy for disk image analysis, and Gitleaks for secret detection in Git history. The guide emphasizes proper documentation of assets, including ownership confirmation by colleagues like Lena, and highlights limitations such as VPN effects on scan results or TLS termination at load balancers. It concludes by stressing the value of maintaining accurate records to simplify future certificate renewals and incident handling.
Personal Data in Russian Franchise Networks: Who Qualifies as Data Operator Under 152-FZ
In typical franchise models, customer personal data is collected at franchisee points, stored in the franchisor’s central system, and used for network-wide loyalty programs and marketing. The key legal question is which party determines the purposes of processing and therefore bears operator status under Federal Law No. 152-FZ. The law defines an operator as the entity that independently or jointly sets processing purposes, data composition, and actions, regardless of contractual labels. Franchisees usually act as operators when concluding contracts with customers, while franchisors become processors unless they pursue independent goals such as running loyalty schemes or sending branded advertising. When a franchisor defines its own purposes, both parties may simultaneously qualify as operators for different processing objectives, requiring separate legal bases and documentation. Proper data-processing instructions must be embedded in the commercial concession agreement and must list specific data categories, actions, security measures, and breach-notification timelines to avoid administrative fines ranging from 150,000 to 500,000 RUB.
UPS Battery Checks Trigger Minute-by-Minute Fluctuations in Global Power Grids
Power grids worldwide have exhibited synchronized frequency dips exactly once per minute for years, caused by simultaneous battery testing routines in large uninterruptible power supply installations. Researchers from Germany traced the phenomenon to UPS management software that initiates battery health checks on synchronized clocks, creating cumulative power spikes when thousands of units activate together. The team installed monitoring equipment across 80 locations at the Jülich research center and confirmed the characteristic one-minute rhythm wherever large battery systems operated. Detailed measurements on a single installation revealed a sharp consumption spike at the start of every minute. Although the oscillations do not yet threaten grid stability, they force hydroelectric turbines to repeatedly slow and accelerate, increasing mechanical wear. In Ireland the amplitude of the minute-scale signal grew fourfold between 2016 and 2021. The proposed mitigation is to desynchronize the checks by introducing random time offsets across devices.
Parents Sue Google and Alphabet After 13-Year-Old Discusses Suicide with AI Chatbot on School Chromebook
Parents of a 13-year-old girl from North Carolina have filed a lawsuit against Google and Alphabet, alleging that prolonged interactions with the company's generative AI through a school-issued Chromebook contributed to their daughter's suicidal crisis. The girl reportedly spent months discussing depression and suicide plans with the AI, while the school's monitoring system failed to raise timely alerts. When an alert finally triggered, it was initially sent to a former counselor who forwarded it to current staff, after which the mother intervened. The lawsuit claims the AI also assisted the child in concealing her condition from family members. Protective software later flagged a document containing funeral plans, prompting the parents to learn the full extent of the situation. Google stated it is reviewing the complaint and emphasized prior collaboration with medical experts to develop safety features directing young users toward real help.
From Japanese sources
Translated from Japanese
Ivanti Patches 13 Vulnerabilities in Five Products, Including Two Critical Flaws
Ivanti has issued security updates for five enterprise products to address a total of 13 vulnerabilities, two of which carry a critical severity rating. The affected products include Ivanti Endpoint Manager, Ivanti Cloud Services Application, Ivanti Sentry, Ivanti Endpoint Manager Mobile, and Ivanti User Workspace Manager. The most severe issues allow unauthenticated remote code execution and unauthorized certificate manipulation. One critical flaw, CVE-2026-121653, affects the Core component of Ivanti EPM and scores 9.8 on CVSS v3.0. A second critical vulnerability, CVE-2026-121683, impacts Ivanti CSA version 5.0.8 and enables arbitrary addition or deletion of certificate registration data. The remaining vulnerabilities are rated high and affect multiple other Ivanti solutions.
Google Issues Second Chrome Update This Week, Patching 83 Vulnerabilities Including Five Critical Flaws
Google has released a new security update for its Chrome browser, marking the second release within the same week. The update addresses a total of 83 vulnerabilities across Windows, macOS, and Linux platforms. Five of these issues are rated Critical and involve Use After Free memory errors in key components such as ServiceWorker, CSS, Layout, Skia, and Accessibility. The previous update from November 9 fixed nine vulnerabilities, one of which (CVE-2026-125350) had already been observed in active exploitation. No evidence of in-the-wild exploitation has been reported for the latest set of fixes. The new versions are Chrome 157.0.8103.79 for Windows and macOS and 157.0.8103.78 for all three operating systems.
Mozilla Releases Firefox 160 Fixing 99 Vulnerabilities Including Multiple High-Severity Issues
Mozilla Foundation has published Firefox 160 along with its extended support release, addressing a total of 99 vulnerabilities. Although no Critical-rated flaws were present, 57 vulnerabilities received a High severity rating. Among the notable issues is a Use-After-Free flaw in CanvasWebGL (CVE-2026-124907) that could enable privilege escalation and sandbox bypass. A separate Use-After-Free vulnerability tied to inter-process communication (CVE-2026-124903) also carries the risk of sandbox escape. Additional patches resolve Same-Origin Policy bypasses tracked as CVE-2026-124874 and CVE-2026-124902, along with numerous other security problems across the browser.
Fortinet Discloses Eight FortiOS Vulnerabilities Including Three Critical Flaws
Fortinet has published security advisories detailing eight vulnerabilities affecting its FortiOS operating system used in UTM appliances. Three of the issues received the highest severity rating of Critical. CVE-2026-126259 allows unauthenticated command execution with super-admin privileges in FGSP combined with configuration synchronization or auto-scale setups via crafted HA packets. CVE-2026-126254 stems from integer truncation in the BGP daemon and can propagate malicious attributes from configured iBGP peers. CVE-2026-126253 enables authentication bypass in the OSPF daemon, permitting unauthenticated LSA injection. The remaining five vulnerabilities were assigned lower severity ratings. Administrators are urged to apply the available patches promptly.
Microsoft Patches Over 1,000 Vulnerabilities in November 2026 Patch Tuesday Release
Microsoft has issued its November 2026 monthly security updates, addressing a total of 1,093 vulnerabilities across Windows, Office, Azure, SQL Server, SharePoint Server, Exchange Server, and Developer Tools. The update also covers a vulnerability in the third-party Tencent RapidJSON library identified as CVE-2026-124586. Among the fixes, 63 vulnerabilities received the highest severity rating of Critical, while 1,029 were rated Important. Privilege escalation issues accounted for the largest share with 535 cases, followed by 296 remote code execution flaws. Several vulnerabilities have already been confirmed as exploited in the wild. The release follows the standard Patch Tuesday schedule on the second Tuesday of the month.
Critical and High-Severity Privilege Escalation Flaws Patched in Zoom Workplace for Windows
Zoom has disclosed two vulnerabilities affecting its Windows version of Zoom Workplace that could allow unauthenticated attackers to escalate privileges over the network. CVE-2026-108186 received a CVSS v3.1 base score of 9.6 and is rated Critical due to improper input validation. CVE-2026-108187 carries a CVSS score of 8.1 and is rated High because of an origin validation issue. Both flaws were addressed in security updates released by the vendor. Organizations are urged to apply the latest patches immediately to eliminate the risk of remote exploitation without authentication.
From Portuguese sources
Translated from Portuguese
Notion Confirms Exposure of AI Assistant Transcripts After Fireworks AI Breach
Notion has confirmed that a security incident at Fireworks AI exposed conversation transcripts from its Notion AI assistant, affecting less than 1% of customer workspaces. The breach occurred because Fireworks handled classification tasks for the Insights feature and served open-weight models. Notion stated that its own systems were not compromised. The timeline shows initial notification on November 2, 2026, followed by disconnection of systems on November 3 and confirmation of customer data exposure on November 8. Most transcripts lacked author or workspace attribution and did not include tool call results, though user-entered content could still identify individuals or organizations. Fireworks attributed the intrusion to a financially motivated group engaged in LLMjacking, involving theft of credentials to hijack AI models for illicit use.
Ransomware Group BYOD Claims Theft of Toyota Customer Personal Data in Unverified Extortion Listing
A ransomware group calling itself BYOD has added Toyota to its victim list on a dark web extortion site, claiming to have stolen personal information belonging to the automaker’s customers. The announcement, updated on November 10, 2026, alleges access to full names, email addresses, physical addresses, telephone numbers, and dates of birth, along with data from the company’s self-service kiosk terminals. No independent verification of the claims has been performed, and the listing provides no details on the volume of records, affected regions, or specific business units involved. The group states that parts of the environment were isolated but claims residual remote access paths remained; however, the announcement contains no technical indicators or proof-of-compromise samples. Toyota has not issued any public statement confirming or denying the incident. The report notes that similar unverified listings are sometimes used to pressure victims into negotiations and may include repackaged data from prior breaches. This marks a contrast with Toyota’s 2023 public disclosure of a separate cloud misconfiguration incident that the company itself reported.
Santos Port Authority Systems Offline After Suspected Cyber Incident and Possible Ransom Demand
The systems of Autoridade Portuária de Santos (APS), which manages Brazil's largest port, have been unavailable since the morning of November 6, 2026. The outage began after a power fluctuation that affected servers and later recurred despite initial restoration efforts. APS has confirmed a suspected cyber incident but has not determined the full scope or whether data was accessed. Local reporting indicates that alleged attackers demanded financial ransom to restore operations, though this claim remains unconfirmed by APS or federal police. Backups have been sent for forensic examination while Serpro technicians assist in recovery. Port operations continue using manual procedures and heightened security measures, but vessel and truck wait times have increased significantly.
CISA and FBI Warn of Global Cyber Attacks on Industrial Refrigeration and Cold Chain Controllers
CISA, the FBI, and multiple U.S. agencies issued a joint advisory on November 5 detailing malicious cyber activity targeting industrial refrigeration systems and cold chain monitoring equipment worldwide. Attackers are exploiting unpatched or internet-exposed temperature controllers in supermarkets and cold storage facilities through authentication bypass, arbitrary code injection, and weak configurations. Once inside the control panels, threat actors force units into continuous heating and defrost cycles, the opposite of their intended function, while also causing denial of visibility that prevents operators from seeing real equipment status. The advisory highlights risks including reduced system lifespan, fire hazards, stock loss, and potential consumer harm from spoiled products stored outside safe temperature ranges. Sectors most affected include public health, chemical manufacturing, food and agriculture, and refrigerated transportation. Recommended mitigations focus on network segmentation, removal of remote access from the public internet, strong authentication, firmware updates, and regular offline backups.
Critical Flaw in React Server Components Enables Unauthenticated Remote Code Execution
The React team disclosed security advisory GHSA-xqc2-xf4c-x3h3 describing a high-impact vulnerability in React Server Components that can lead to remote code execution. The flaw affects packages react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack across multiple version ranges from 19.0.0 through 19.3.0. Exploitation requires no authentication, privileges, or user interaction, allowing a remote attacker to execute code on the server by sending a specially crafted request containing multiple typed arrays alongside attacker-controlled data. No CVE identifier was assigned, and the advisory notes that the issue is distinct from the previously reported React2Shell vulnerability tracked as CVE-2025-55182. Affected applications are limited to those running React code on the server with supported frameworks and bundlers; client-only React usage is unaffected. Patches are available in versions 19.0.9, 19.1.10, 19.2.9, and 19.3.1, with immediate updates strongly recommended. The React team also linked similar typed-array handling issues in Next.js Cache Components, suggesting a broader class of errors.
Vulnerability in Anthropic Claude Dispatch Allowed Browser Extensions to Execute Code on Host Machine
Security researchers disclosed a flaw in Anthropic's Claude Dispatch feature on November 6, 2026. The issue enabled any browser extension with script execution rights on claude.ai to issue commands to the Claude Desktop agent as if they originated from the legitimate user. Because the Dispatch component trusted any authenticated browser session without additional visible binding to the desktop application, malicious scripts could trigger installation of packages or other actions on the local system. The proof-of-concept required only an authenticated user, an active Dispatch session, and a malicious extension; the researchers demonstrated installation of an npm package that launched the Calculator application. The same technique could have been used to exfiltrate files or deploy backdoors given the agent's existing permissions on the endpoint. Anthropic accepted the report in May 2026, later confirmed it duplicated an internal finding, and retired the Dispatch feature by late October 2026. Researchers recommend disabling cross-device Dispatch when unnecessary and carefully managing paired devices.
From Chinese sources
Translated from Chinese
Over a Dozen AI Platforms Breached in One Month for API Keys in LLM-Jacking Operations
Between late September and early November, at least a dozen AI developer platforms were compromised in a coordinated campaign targeting API access tokens rather than customer data. Affected organizations include Andromeda, NVIDIA Brev, CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, Zeabur, Chainstack, and WorkOS. Attackers exploited third-party components and internal sales applications to reach stored credentials used for AI inference services. The stolen tokens enable LLM-jacking and model distillation activities, with multiple threat groups observed reusing the same credentials shortly after disclosure. The open-source penetration testing framework Artex was used to automate reconnaissance and exploitation, lowering the barrier for less skilled actors. Companies such as Chainstack and WorkOS confirmed the incidents through their own disclosures, highlighting risks in non-core systems that store high-value AI credentials.
Stolen Credentials Poison cPGuard Update Channel, Turning Security Software into Data Theft Backdoor
Attackers used compromised OPSSHIELD credentials to hijack the cPGuard update distribution network on November 2 at 02:06 UTC, injecting malicious scripts into versions 5.88.12 through 5.88.19. The poisoned updates targeted Linux servers running the security tool, which holds root privileges on hosting provider and cloud infrastructure machines. The script harvested /etc/shadow, /etc/passwd, MariaDB/MySQL root credentials from my.cnf, root shell history containing API tokens, and SSH authorized_keys files before exfiltrating them via the vendor's own infrastructure. A persistent backdoor was also dropped at /var/tmp/.cpg91511_sh. OPSSHIELD detected the intrusion within 12 hours and halted distribution, but confirmed that 32 customer servers had their data accessed. The incident highlights risks of relying on static credentials for security product update pipelines without code signing or behavioral restrictions.
Lost Control Series Highlights Realistic Social Engineering Attacks Disguised as Workplace Documents
A new micro-film in the Lost Control series demonstrates how employees can be tricked into compromising their organizations by opening files that appear to be routine work documents such as layoff lists, internal notices, or tax inspection alerts. The six-minute video recreates authentic attack vectors including phishing emails, fake download sites, bundled legitimate software packages, and phishing websites, as documented in five recent cases released by China's Ministry of Public Security Cyber Security Bureau. These attacks succeed because they mimic normal business communications rather than obvious malware delivery methods. The producers recommend sharing the film internally, reviewing work group messages from the past 30 days for suspicious attachments labeled as personnel lists or official notices, and verifying any such files before opening them. Organizations whose annual security training lacks measurable improvement in employee detection rates are invited to contact Allsec for assessment. Victims who have already clicked links or transferred funds are advised to call the national anti-fraud hotline 96110 immediately. The content is AI-generated with artistic modifications based on publicly reported incidents.
AI Agents Rewrite SaaS Monetization Models as Marketplace Platforms Drive Global ISV Growth
The 2026 narrative of SaaS apocalypse driven by AI has reversed following strong earnings from major vendors. Companies including Salesforce, Palantir, Kingdee and Yonyou began reporting AI-related revenue, while IDC and Nvidia CEO Jensen Huang argued that AI agents amplify rather than replace software. At the 2026 Amazon Web Services Software Enterprise Summit in Shenzhen, AWS launched an ISV go-global accelerator and six new AI agents on Marketplace to streamline sales, compliance and partner management. Marketplace now hosts over 30,000 products from 6,000 sellers, with Agentic AI listings growing from 800 to more than 3,000 since July 2025. Chinese ISVs such as PingCAP, Zilliz, Manus and Plaud AI are shifting from simple listings to localized operations and bundled solutions. The platform projects hundreds of billions in transaction volume for 2026, supported by a network of 130,000 global partners. Industry leaders emphasize that future growth depends on embedding AI as core product logic rather than add-on chat interfaces.
WorkBuddy Charts Next Phase Focused on Openness and Connectivity
WorkBuddy has announced its strategic direction for the upcoming development cycle. The company stated that its next steps will prioritize openness and stronger connections across its platform and ecosystem. No technical details, security implications, or product specifications were provided in the announcement. The move appears to be a general business and product strategy update rather than a cybersecurity-related disclosure.
Binance Hit by Record $6.3 Billion Theft After Engineer Laptop Compromise
Binance suffered what could become the largest crypto theft in history, with approximately $6.3 billion in assets drained from exchange wallets over three days in late October. On-chain analysts at Arkham and Glassnode first detected the movement of $5.3 billion, including $1.66 billion in USDT, 17,985 ETH worth $1.45 billion, and $767 million in USDC. Binance confirmed the incident, halted deposits and withdrawals, froze around $3 billion on-chain with law enforcement and partners, and pledged to cover all losses from its SAFU fund. The root cause was traced to a compromised laptop belonging to a development operations engineer, allowing attackers to access a service container and issue authorized-looking withdrawal transactions without any private key exposure. The attack bypassed traditional cold wallet protections by impersonating legitimate privileged access rather than stealing cryptographic keys. Industry observers note this highlights systemic risks in developer endpoint security, long-lived credentials, and control-plane protections across exchanges.
From Spanish sources
Translated from Spanish
Node.js Issues Security Releases for 26.x, 24.x and 22.x Fixing High-Severity TLS and Brotli Flaws
Node.js published security updates on October 21, 2026 for the 26.x, 24.x and 22.x release lines. The patches address multiple high-severity vulnerabilities affecting TLS hostname validation and the Brotli decoder, along with updates to critical dependencies including OpenSSL and Undici. Several CVEs cover bypasses in certificate hostname checks when IP addresses use full-width digits or when hosts resolve loosely to IP addresses. A particularly serious out-of-bounds write in the Brotli decoder (CVE-2026-111497) could enable remote code execution on services processing compressed responses. Additional fixes resolve keep-alive socket timing issues, DNS resolution truncation with NUL characters, and entropy caching problems in crypto.randomUUID and randomInt functions. The releases also update c-ares, Undici, OpenSSL, SQLite and ca-cert bundles following the eMudhra intermediate CA compromise.
Node.js Fixes High-Severity Brotli Decoder Flaw Leading to Remote Code Execution
A high-severity vulnerability in the bundled Brotli decoder of Node.js allows out-of-bounds writes when processing attacker-controlled compressed data, potentially resulting in remote code execution. The flaw, tracked as CVE-2026-111497, affects all supported branches including 22.x, 24.x, and 26.x prior to the October 21, 2026 security release. Patched versions 22.23.4, 24.22.1, and 26.12.1 address the memory corruption issue that arises during Brotli decompression in services accepting third-party content. The same update resolves additional high-severity problems, notably hostname validation weaknesses in TLS. Organizations using unsupported branches such as 18.x, 20.x, 23.x, and 25.x must migrate to maintained releases, while those linking against system Brotli libraries should verify inclusion of upstream commit 0ed4268. Security teams are advised to audit all environments, including containers and CI pipelines, that process Brotli-encoded data.
PHP Issues Emergency Patches for Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released urgent patches for two critical vulnerabilities collectively known as PHP2Shell that enable unauthenticated remote code execution on affected servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, score 9.2 on CVSS v4.0 and have already seen active exploitation attempts with malicious payloads adjusted to bypass WAF rules. The issues affect multiple PHP deployment methods including Apache with mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed, and do not require complex application code to be exploitable. CVE-2026-109618 involves a memory corruption chain leading to code execution under the web process privileges, while CVE-2026-109619 stems from an obsolete global state issue causing use-after-free conditions that can result in memory disclosure and code execution. Patched versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, with administrators advised to restart all persistent workers after updating. Temporary mitigations such as setting memory_limit to -1 and disabling session.upload_progress.enabled are available for environments that cannot patch immediately.
Cyberattack Exploits Exposed Danfoss Refrigeration Controllers Across French Supermarkets
A remote cyberattack targeted Danfoss AK-SM 8xxA Series controllers in French supermarkets, allowing attackers to manipulate refrigeration parameters and trigger defrost cycles that raised temperatures and spoiled food stock. The incident impacted an estimated 250 to 350 stores belonging to major chains including Intermarché, Carrefour Market, Leclerc, and others. Paris prosecutors have opened a large-scale investigation into the attack and associated damages, including potential fires. The root cause traces to outdated software on internet-exposed OT management interfaces, with multiple CVEs enabling authentication bypass and remote code execution. Thousands of similar Danfoss systems remain publicly accessible worldwide, highlighting persistent OT exposure risks. Immediate remediation steps include closing web consoles, enforcing VPN access, and applying updates to versions 4.2 and 4.3.1 or later.
Attackers Exploit Critical Atlassian Data Center Flaw CVE-2026-21589 Hours After PoC Release
Exploitation attempts against CVE-2026-21589 began almost immediately after technical details and a Nuclei template were published. The vulnerability allows unauthenticated arbitrary file read in multiple Atlassian Data Center products and carries a CVSS v4.0 score of 9.3. In environments integrated with Crowd, attackers who obtain crowd.properties can extract plaintext credentials and escalate to administrator privileges via the Crowd API. The flaw stems from improper handling of double-colon sequences in a shared web resource library, enabling path traversal against plugin resource endpoints. Affected products include Bitbucket Data Center, Confluence Data Center, Jira Software Data Center, Jira Service Management Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian urges immediate patching outside normal cycles and recommends WAF rules or Tomcat RewriteValve configurations to block traversal patterns. Organizations should also review access logs for double-decoded URLs containing .., /, \, or :: sequences.
LibreOffice and Apache OpenOffice Flaws Enable Remote Code Execution via Malicious Spreadsheets Without Macro Warnings
Two vulnerabilities, CVE-2026-63277 in LibreOffice Calc and CVE-2026-59265 in Apache OpenOffice, allow attackers to execute arbitrary code simply by tricking users into opening specially crafted spreadsheet files. The flaws exploit Java integration and class path handling, bypassing traditional macro security prompts entirely. LibreOffice has already released fixes in versions 26.2.5 and 26.8.0 that restrict class path entries to local file URLs only. Apache OpenOffice 4.1.16 and earlier remain vulnerable, with the stable patch expected in 4.1.17; interim mitigation requires disabling Java integration. The issues highlight risks in office suites that process untrusted documents containing external data connections or JDBC references. Organizations are advised to enforce least-privilege execution and avoid opening files from unknown sources until patches are applied.