AI Safety Guidelines: 10 Essential Rules to Protect Data, Finances, and Reputation When Working with LLMs
A detailed analysis of emerging AI-related security risks highlights how large language models can autonomously execute attack chains, fall victim to prompt injection, and cause cascading errors in complex workflows. The article examines real-world incidents such as the Anthropic vending machine pricing failure, the Meta Instagram account takeover via overly helpful AI support, and Copilot Studio data leaks through prompt injection. It emphasizes that while attack methods themselves are not revolutionary, AI agents can now scale them at machine speed with autonomous decision-making and recovery capabilities. The piece provides ten concrete safety rules covering financial controls, fact verification, data confidentiality, context pollution prevention, and access limitation. It also stresses that ultimate responsibility always remains with the human operator, not the AI system.
Translated from Russian
Read full articleLatest News
AI-Driven Mega-Bot Launches Multi-Day Assault on Websites, KillBot Service Holds the Line
An advanced AI-powered bot known as Mega-Bot conducted a sustained attack against websites protected by the KillBot service between October 31 and November 2. The bot combined AI scanning, planning, expansion, and disruption capabilities in an attempt to bring sites offline. KillBot successfully prevented any client websites from going down and eliminated the need for backup restoration. The incident serves as a warning that unprepared sites face similar risks over weekends when administrative response is delayed. The defending service has published a detailed account of the attack timeline and the specific defensive measures that proved effective. Organizations are urged to review their current protections against automated AI-driven threats before the next business day begins.
Translated from Russian
Anthropic Report: Unreleased Claude Model Builds Working Exploits for Chrome, Safari, Android, Windows and Linux
Anthropic's Frontier Red Team published a report detailing how an unreleased internal version of Claude independently discovered vulnerabilities across major platforms and chained them into working attacks. The model located memory corruption issues in Chrome's V8 engine, bypassed multiple sandbox layers, and produced a one-click exploit that launches Calculator on macOS. Similar chains were built for Safari to steal cross-site data including email contents, for Android to extract photos from a locked Pixel 9 over USB, for Windows to cause denial-of-service via QUIC packets, and for the Linux kernel to achieve remote root via a use-after-free race in the network stack. All findings received CVEs, most have been patched, and the report emphasizes that the model required only high-level human tasking rather than step-by-step guidance. Anthropic notes that such rapid exploit generation shortens the safe window for deploying patches and is therefore restricting access to the model while expanding controlled defensive programs.
Translated from Russian
Citrix Issues Critical XenServer Patches for Host Compromise Vulnerabilities
Citrix published security bulletin CTX697256 on November 3, 2026, disclosing eight vulnerabilities affecting XenServer. The most severe issue, tracked as CVE-2026-98432 and rated critical, enables an unauthenticated attacker who reaches the management network to compromise the virtualization host and associated appliances. A second flaw, CVE-2026-102703, allows a privileged user inside a guest virtual machine to break out and take control of the underlying host, violating isolation guarantees. Six additional vulnerabilities impact network boot and secure boot processes, potentially allowing attackers to compromise VMs during startup or bypass code-signing policies. Affected products include XenServer 8.4 and 9 along with Workload Balancing and Conversion Manager appliances. Citrix recommends immediate application of the fixes and temporary isolation of the management network while updates are deployed.
Translated from Portuguese
Russian-Aligned Gorbag Group Exploits WinRAR CVE-2025-8088 to Steal Credentials from Ukrainian Government Bodies
ESET has published a detailed report on the Gorbag threat group, a Russia-aligned actor active since at least February 2025, that has adopted the WinRAR path traversal vulnerability CVE-2025-8088 to deliver the BeautyStealer password stealer against Ukrainian public sector targets. The flaw, fixed in WinRAR 7.13, allows attackers to escape the chosen extraction folder and write files to arbitrary locations using Windows alternate data streams. Upon opening the malicious RAR archive, victims see a decoy PDF while a Windows startup shortcut and PowerShell loader are silently installed to maintain persistence. BeautyStealer, written in C++, harvests saved passwords, cookies, and browsing data from Chrome, Edge, Opera, and Firefox, along with OpenVPN configurations, KeePass databases, Java key files, and Ukrainian electronic signature keys. The group previously relied on malicious Excel macros in 2025 before switching to RAR-based delivery that requires no user interaction beyond opening the archive. Stolen data is exfiltrated via the Telegram API or, from version 1.2 onward, to attacker-controlled servers. ESET links the operation to earlier activity tracked as GIFTEDCROOK and UAC-0226 by CERT-UA.
Translated from Portuguese
AI Agents Rewrite SaaS Monetization Models as Marketplace Platforms Drive Global ISV Growth
The 2026 narrative of SaaS apocalypse driven by AI has reversed following strong earnings from major vendors. Companies including Salesforce, Palantir, Kingdee and Yonyou began reporting AI-related revenue, while IDC and Nvidia CEO Jensen Huang argued that AI agents amplify rather than replace software. At the 2026 Amazon Web Services Software Enterprise Summit in Shenzhen, AWS launched an ISV go-global accelerator and six new AI agents on Marketplace to streamline sales, compliance and partner management. Marketplace now hosts over 30,000 products from 6,000 sellers, with Agentic AI listings growing from 800 to more than 3,000 since July 2025. Chinese ISVs such as PingCAP, Zilliz, Manus and Plaud AI are shifting from simple listings to localized operations and bundled solutions. The platform projects hundreds of billions in transaction volume for 2026, supported by a network of 130,000 global partners. Industry leaders emphasize that future growth depends on embedding AI as core product logic rather than add-on chat interfaces.
Translated from Chinese
WorkBuddy Charts Next Phase Focused on Openness and Connectivity
WorkBuddy has announced its strategic direction for the upcoming development cycle. The company stated that its next steps will prioritize openness and stronger connections across its platform and ecosystem. No technical details, security implications, or product specifications were provided in the announcement. The move appears to be a general business and product strategy update rather than a cybersecurity-related disclosure.
Translated from Chinese
Microsoft Paint Patch for CVE-2026-83844 Fails to Reach Some Windows 11 Users via Microsoft Store
Microsoft fixed a remote code execution vulnerability in the Paint application for Windows 11, but the update is not reaching all users through the Microsoft Store. The flaw, tracked as CVE-2026-83844, carries a CVSS score of 8.1 and involves an out-of-bounds memory read that could allow unauthenticated network attacks. Although exploitation is rated as highly complex, the issue is classified as important by Microsoft. The patch is delivered separately from Windows Update, requiring users to verify the Paint version manually in the Microsoft Store. The clean version is listed as 11.2609.401.0, yet multiple systems remain on 11.2603.251.0 despite automatic updates being enabled. Windows Latest reported the distribution problem after checking its own systems and collecting similar reports from administrators. No real-world exploitation of the vulnerability has been observed so far.
Translated from Russian
Russian Cybersecurity Market Set to Hit 455 Billion Rubles by 2026 as Talent Shortage Persists
MWS Cloud forecasts that the Russian information security market will grow 20.8 percent to reach 455.4 billion rubles in 2026. The largest segment will be software at 216.5 billion rubles, followed by services at 167 billion and hardware at 71.9 billion rubles. Demand is increasingly driven by sophisticated attacks, regulatory requirements and fines rather than import substitution alone. BI.ZONE offers a more conservative estimate of 10-15 percent annual growth. Managed security services such as monitoring, incident response and vulnerability management are leading the services segment because few organizations can maintain 24/7 in-house teams. Director Artem Gribkov of Angara MTDR estimates the personnel deficit at approximately 40 percent, especially at middle and senior levels.
Translated from Russian
Mozilla Releases Firefox 159.0.1 to Patch High-Severity Layout Vulnerability CVE-2026-120572
Mozilla Foundation has issued Firefox 159.0.1 to address a high-severity vulnerability tracked as CVE-2026-120572. The flaw resides in the Layout: Block and Inline component responsible for web page rendering. It stems from improper handling of boundary conditions during layout processing. CISA assigned the issue a CVSSv3.1 base score of 8.8, confirming high impact. The update was published on November 3, 2026, and is rated high severity by both Mozilla and CISA. Users are advised to apply the patch immediately to mitigate potential exploitation risks.
Translated from Japanese
From Russian sources
Translated from Russian
Russian Internet Users Report Growing Access Restrictions as Certificate Revocations Affect 39 Percent of Respondents
A recent telephone survey conducted by Russian Field between September 23 and 30, 2026, among 1,600 participants representative by gender, age, federal districts, and settlement types shows that 39 percent of Russian internet users have noticed restrictions or complications when trying to access websites. When sites fail to open due to certificate problems, 26 percent of respondents said they would simply stop visiting the resource. The findings, published by Kod.ru, also indicate that 57 percent of users are aware that Russian websites may not load in certain browsers because of revoked foreign certificates. In response to certificate errors, 55 percent would switch browsers, 22 percent would install the required certificates, and 21 percent would try accessing the site from a mobile device. Younger users are more inclined to use VPNs or proxies, while older respondents more often choose to abandon the site. Overall, 77 percent of those surveyed expect further changes to the Russian internet segment, with only 9 percent believing it will remain unchanged.
Positive Technologies Analyzes 140 Incidents: Web Applications Drive Half of Breaches, APT Groups Found in 49% of Cases
Positive Technologies' Incident Response team examined more than 140 full-cycle investigations and retrospective analyses conducted between Q4 2025 and Q3 2026. Web applications on the perimeter remained the leading initial access vector, accounting for 50.8% of incidents, with newly targeted services including Zimbra mail servers and TrueConf video-conferencing platforms. APT activity was detected in 49.3% of victim organizations, while supply-chain attacks through contractors and ViPNet networks still represented 14.9% of entries despite a decline from the previous year. Industry became the most affected sector at 22.5%, and median time to bring incidents under control after engagement stood at two days. Root causes continued to center on outdated software, missing multi-factor authentication, and poor network segmentation. Three previously unknown APT groups—APT10051, Stingy Basilisk, and Chewbacca—were identified during the investigations.
sshhole: OpenSSH Authentication Bypass on musl libc Systems Without PAM
An emergency patch for OpenSSH 10.6p2 was released on November 5, 2026, to fix a critical authentication bypass vulnerability affecting Linux systems using musl libc without PAM support. The flaw allowed attackers to log into accounts with a locked password by supplying any string longer than 256 bytes. The root cause traces back to a chain of engineering decisions: musl's crypt() returning '*' on length errors instead of NULL, OpenSSH's 2016 timing attack mitigation that selected salts from real hashes, and the resulting strcmp match between error result and the shadow '*' marker. Exploitation required a specific combination of musl, OpenSSH without PAM, password authentication enabled, and an account marked with '*' in /etc/shadow, notably impacting Alpine Linux cloud images. The vulnerability was discovered by researcher Özgün Kültekin using LLM-assisted fuzzing of 17,600 authentication variants. OpenSSH 10.6p2 or equivalent distribution patches close the issue; until applied, administrators should set PasswordAuthentication no where password login is unnecessary.
GhostMap Vulnerability Forces Android Devices into Unrecoverable Boot Loops
Bitdefender researchers have identified GhostMap, a vulnerability that causes system_server to crash repeatedly when processing a specially crafted APK file. The flaw stems from inconsistent handling of ZIP archive parameters across Android system libraries, allowing a malformed resource to trigger an infinite reboot cycle. No code execution or permissions are required; the malicious APK only needs to be present on the device. The issue affects devices running Android 10 and later, with successful reproduction demonstrated on a Pixel device running Android 17 and the August 2026 security patch. Safe mode fails to interrupt the loop, and recovery often requires a factory reset that erases local data. Google initially closed the report as unreproducible before reassigning it to the appropriate team for potential future remediation.
Apple to Scan iCloud Photos and Files Shared via Public Links Starting with iOS 27.3
Apple announced that it will begin scanning content stored in iCloud when users share files or photos through public links. The feature activates with the release of iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. Any file made accessible to anyone with the link will now be checked by Apple for malicious materials. This change effectively means that sharing via public links grants Apple visibility into the shared content for security purposes. The move aims to detect harmful files before they reach other users through shared links.
OTP Bank Details How It Detects Professional Cashback Hunters and Card Rental Schemes
OTP Bank’s head of information security control, Alexander Shirokov, explains where legitimate use of cashback programs ends and abuse begins. The bank distinguishes rational use of tariffs from deliberate schemes created solely to extract maximum bonuses. Professional cashbackers who study rules in detail, rent cards, or share privileges are monitored through behavioral analytics and ML models. Such activity creates concentrated load on loyalty programs and can force banks to adjust conditions. The institution stresses that automatic systems are only the first layer and analysts review borderline cases to avoid penalizing ordinary customers.
From Japanese sources
Translated from Japanese
WatchGuard AuthPoint Authentication Gateway Hit by Four Critical Vulnerabilities
WatchGuard disclosed four security advisories for its AuthPoint multi-factor authentication solution on November 4, 2026. Three of the issues received a Critical rating while one was rated High. The flaws reside in the AuthPoint Authentication Gateway component and affect environments integrated with LDAP and Active Directory. CVE-2026-121639 allows unauthenticated attackers to disrupt authentication services or delete directory synchronization settings over the network. The remaining three vulnerabilities enable man-in-the-middle attacks, capture-replay actions, and forged authentication results. No exploitation in the wild has been observed. WatchGuard has released updated versions to address all reported issues.
Fukuoka Prefecture Exposes Personal Data of 183 Corporate Officers Due to Website File Misconfiguration
Fukuoka Prefecture has confirmed that personal information belonging to 183 corporate officers from 24 organizations was left publicly accessible on its official website. The exposure occurred within files related to the Fukuoka Prefecture Easy-to-Work Care Workplace Certification System. The files were uploaded by a contracted vendor between August 21 and September 17, 2026, with incorrect permissions that allowed online editing and saving instead of read-only access. The issue remained undetected until an applicant inquired about download procedures. Upon discovery, the prefecture instructed the vendor to remove the files and contacted all 24 affected corporations by telephone to provide explanations and apologies. The incident highlights risks associated with improper configuration of application files containing sensitive personal data on government websites.
CISA Adds Apple CVE-2024-27834 to Known Exploited Vulnerabilities Catalog After Confirmed Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added the Apple vulnerability CVE-2024-27834 to its Known Exploited Vulnerabilities catalog following confirmed in-the-wild exploitation. The flaw impacts multiple Apple platforms including iOS, iPadOS, macOS, Safari, tvOS, and watchOS. It is an authentication bypass issue that can be exploited for arbitrary read and write operations when an attacker already possesses initial access rights. The vulnerability was discovered and patched in 2024, yet exploitation activity has now prompted federal action. NIST rates the issue at CVSS 5.5 Medium. U.S. federal agencies are required to apply mitigations by November 18.
Ruby on Rails Releases Security Updates Fixing 21 Vulnerabilities Including Critical Active Storage Flaw
The Ruby on Rails development team has issued security updates for versions 8.1.4.1 and 8.0.5.2 that address a total of 21 vulnerabilities. One issue rated critical affects the Active Storage component when ImageMagick is used for image processing. The flaw tracked as CVE-2026-122006 carries a CVSS v3.1 base score of 9.8 and could allow arbitrary file writes or data exfiltration from untrusted uploads. Additional high-severity problems enable remote code execution, arbitrary file reads, parameter validation bypass, IP spoofing, cross-site scripting, and denial-of-service conditions. The 8.0 branch will reach end of security support on November 7, 2026, after which no further fixes will be provided. Administrators are strongly advised to apply the patches immediately.
WordPress Core Update RCE Vulnerability CVE-2026-119977 Actively Exploited, CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution flaw in WordPress to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The vulnerability, tracked as CVE-2026-119977, resides in the core update mechanism and allows attackers to predict temporary file paths created during package updates, enabling unauthorized code execution from external sources. Wordfence assigned the flaw a CVSS v3.1 base score of 8.1 and reported blocking over 13,000 exploitation attempts targeting its customers within a single 24-hour period. The issue was addressed in the WordPress 7.1.4 release on October 28, 2026, with backports now being rolled out to all branches from version 4.7 onward. CISA has set a three-day remediation deadline of November 6, 2026, for U.S. federal agencies and instructed them to investigate potential compromises. Security researchers note that the attack leverages predictable temporary file locations during the update process, making it particularly dangerous for unpatched installations.
Barracuda ESG Hit by High-Severity Vulnerabilities Allowing Chained Root Access
Barracuda Networks has released patches for multiple products after disclosing two high-severity vulnerabilities that affect the Email Security Gateway (ESG). CVE-2026-116606 is a pre-authentication authorization bypass in ESG that permits an attacker with network access to the management interface to import a malicious backup file and alter device configuration without credentials. CVE-2026-111560 is an OS command injection flaw in timezone configuration handling that requires administrator login but grants root-level command execution. The command injection issue also impacts Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall, and Web Security Gateway. The vendor published its advisory on November 2, 2026, and urges immediate application of the fixes to prevent potential full system compromise through chained exploitation.
From Portuguese sources
Translated from Portuguese
Critical Command Injection Vulnerability in SolarWinds Dameware Enables Remote System Compromise
SolarWinds disclosed CVE-2026-28336, a critical command injection flaw in its Dameware remote support tool on November 3, 2026. Rated 9.9 out of 10, the vulnerability allows an authenticated user to execute arbitrary commands on remote systems managed by the software. The issue stems from insufficient input validation when user-supplied data is passed to the operating system, enabling attackers to append malicious commands. Exploitation requires only a valid, even low-privileged, Dameware account and occurs over the network with low complexity and no user interaction. The flaw affects version 2026.3 and all prior releases, with a fix available in 2026.3.1. SolarWinds also recommends reviewing account lists and restricting network access to administrative segments. This marks the latest in a series of security issues for the vendor, following a privilege escalation fix in 2025 and patches for fifteen Serv-U vulnerabilities in July.
French Bank Crédit Mutuel Arkéa Confirms Cyberattack with Blockchain Investigation Estimating $133 Million in Losses
Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions, though the bank provided no official figures on the financial impact. Blockchain investigator ZachXBT traced more than $106 million moved on November 1 and an additional $27 million, bringing the total beyond $133 million. The funds originated in USDC and USDT, were converted to Ethereum, moved across multiple blockchains, and ultimately exchanged for Monero to hinder tracking. The bank stated that customer assets remained unaffected, operations were gradually restored, and authorities were notified, while warning clients against phishing attempts tied to the incident. Reports have linked the breach to the group's digital bank Fortuneo, a connection the institution has not confirmed. The case highlights how blockchain analysis can reveal the scale of financial crime before official disclosures from the victim.
Mercado Bitcoin Freezes $11 Million After Hacker Drains Hot Wallets Across Multiple Chains
Mercado Bitcoin detected a security incident in the early hours of November 2, 2026, and quickly blocked approximately $11 million in assets to prevent further losses. The exchange confirmed that hot wallets connected to the internet were targeted, allowing unauthorized transactions to spread funds across 17 different networks. Chainalysis, Arkham, and several stablecoin issuers including Tether, Circle, and Paxos collaborated to freeze around $10 million, primarily in stablecoins. The company stated that no customer funds were lost and no data was leaked, though the exact method used by the attackers remains undisclosed. Different analytics firms reported varying totals, with estimates ranging from $38 million to $49 million in total movement. Mercado Bitcoin has committed to absorbing identified losses and restoring services only after full security is ensured.
HackerSec Launches Pentest Superintelligence Using Orchestrated Frontier AI Models
HackerSec has introduced Pentest Superintelligence, a new offensive cybersecurity methodology that orchestrates multiple high-capacity frontier AI models within a single pentest operation. This builds on the company's earlier Pentest AI-First and Pentest AI-Native approaches by requiring at least two frontier models coordinated through a proprietary runtime. The Yaga autonomous agent serves as the core platform, using a custom harness to integrate models from OpenAI, Anthropic, and xAI while preserving operational context from reconnaissance through exploitation. In internal YagaBench evaluations, the six-model orchestrated setup achieved 98 percent resolution of black-box scenarios compared to 40.5 percent for the best single model. All testing remains within authorized scopes with human oversight for result validation. The development shifts industry focus from merely adding AI to tools toward proving effective multi-model coordination and verifiable impact.
WordPress Patches Race Condition in Core Update Process Enabling Unauthenticated Remote Code Execution
WordPress addressed a critical race condition vulnerability in its core update mechanism on October 28, 2026, that could allow remote code execution without authentication. The flaw affects the automatic update process used by the majority of installations, exposing a temporary installer during file extraction to a predictable folder. Wordfence recorded 60,471 exploitation attempts within the first 24 hours after disclosure. The issue was discovered by researcher Umut Bayram and fixed across multiple branches including version 7.1.4, which bundles 22 security patches. Mitigations include immediate updates, restricting public access to the wp-content update directory, and ensuring application firewall coverage. Versions 4.6 and earlier receive no further security updates.
Cloudflare Blocks 18.2 Million DDoS Attacks in Q3 2026 Amid Shifting Attack Patterns
Cloudflare reported blocking 18.2 million network-layer DDoS attacks between July and September 2026, marking a 208% increase from the same period in 2025. The company recorded an average of roughly 8,200 attacks per hour, with 96% lasting under ten minutes and 98% staying below 1 Gbps. Large-scale attacks exceeding 1 Tbps dropped sharply from 805 in Q2 to 251 in Q3, a decline Cloudflare links to early 2026 law enforcement actions against four IoT botnets. Attack vectors shifted notably, with CLDAP reflection falling 99.5% while DNS amplification rose 215% and UDP floods grew 122%. The United States led targeted countries, followed by China and Indonesia, while media and publishing remained the most affected industry. Mirai variants accounted for 46.5% of network-layer bytes, with new families such as Dysphoria and Evooo1Bot emerging to replace dismantled botnets.
From Chinese sources
Translated from Chinese
Binance Hit by Record $6.3 Billion Theft After Engineer Laptop Compromise
Binance suffered what could become the largest crypto theft in history, with approximately $6.3 billion in assets drained from exchange wallets over three days in late October. On-chain analysts at Arkham and Glassnode first detected the movement of $5.3 billion, including $1.66 billion in USDT, 17,985 ETH worth $1.45 billion, and $767 million in USDC. Binance confirmed the incident, halted deposits and withdrawals, froze around $3 billion on-chain with law enforcement and partners, and pledged to cover all losses from its SAFU fund. The root cause was traced to a compromised laptop belonging to a development operations engineer, allowing attackers to access a service container and issue authorized-looking withdrawal transactions without any private key exposure. The attack bypassed traditional cold wallet protections by impersonating legitimate privileged access rather than stealing cryptographic keys. Industry observers note this highlights systemic risks in developer endpoint security, long-lived credentials, and control-plane protections across exchanges.
European Supermarkets Hit by Refrigeration Cyberattacks Exploiting Danfoss CVEs
Multiple European supermarket chains suffered coordinated cyberattacks that remotely altered refrigeration unit temperatures to 50°C, causing widespread food spoilage across France, Sweden, Ireland, Belgium, Luxembourg, and Estonia. Attackers exploited publicly disclosed vulnerabilities in Danfoss AK-SM 800A controllers, including a code-of-the-day authentication bypass and command injection flaws tracked as CVE-2025-41450 and CVE-2025-41451. The incidents, occurring in October and November, resulted in millions of euros in losses with no ransom demands observed. Claroty researchers had previously mapped thousands of exposed management interfaces running outdated firmware. Investigations by ANSSI and national authorities highlight risks to cyber-physical systems where configuration changes produce direct physical damage. Experts recommend immediate network segmentation, firmware updates, and enhanced monitoring of setpoint changes.
No News Content Available
The provided news item contains no text or details in the original Chinese source. Without any substantive information, it is impossible to determine relevance to cybersecurity topics. The entry is therefore classified outside all security-related categories.
360 Security Cloud Opens PHP2Shell Vulnerability Self-Check Platform to Government and Enterprise Users
360 Security Cloud has launched a dedicated self-assessment platform that allows organizations to scan their PHP-based websites and systems for the PHP2Shell vulnerability. The service is now available to government agencies, large enterprises, and small-to-medium businesses. Users can apply by scanning a provided QR code to determine how many of their assets run PHP, identify affected versions, and check whether any systems have already been compromised. The platform addresses key questions about exposure: the number of PHP-powered sites and systems, the presence of vulnerable versions, and signs of prior intrusion. The announcement emphasizes that the tool helps organizations proactively assess risk without requiring external assistance. The original Chinese report was published on October 30, 2026, and the service is positioned as a practical response to ongoing PHP-related security concerns.
GEEKCON 2026 Returns to Shanghai: Hackers Demonstrate AI-Assisted Exploits Across Apps, Robots and Vehicles
GEEKCON 2026 brought the security conference back indoors to the CMG Media Cinema in Shanghai's West Bund after last year's open-air venue. Organizers introduced two new AI-focused tracks alongside the traditional DAF vulnerability exploitation challenge and 30+5 deep-dive sessions. In the AI Hacker Extreme Challenge, six teams used AI tools to compromise six real-world targets in a single afternoon, achieving eleven successful breaches. Demonstrations included remote hijacking of quadruped robots, silent app installation on Android devices, unauthorized vehicle control, and novel exploitation paths in fastjson 1.2.83 discovered with AI assistance. The AI Hacker Debate revealed audience division on whether human hackers will be replaced, while the human-only DAF track awarded no first or second prizes. Organizers framed the event as an effort to illuminate vulnerabilities before they appear in real-world attacks, echoing themes from The Matrix.
From Accessible to Controllable: Ruishu Information Launches AITM for AI Agent Lifecycle Security
As AI Agents become digital employees in enterprise R&D, office, and business workflows, organizations must now ensure they are manageable, controllable, and auditable. A multinational consulting firm’s internal AI platform was compromised by an autonomous agent attack that progressed from interface reconnaissance to vulnerability exploitation and database read-write access. Conventional scanners missed the injection points, but the agent inferred query structures from database error messages. Ruishu Information has responded with its Agent Intelligent Lifecycle Management system (AITM), which enforces security across admission, runtime, permissions, and data flows. The platform combines static scanning, behavioral analysis, semantic judgment, and sandbox execution for pre-deployment checks, followed by continuous runtime validation and LLM data-plane protection. AITM applies HMAC-SHA256 signatures, tool whitelists, PII tokenization, and four-stage Trace auditing to reduce blind spots throughout the agent lifecycle.
From Spanish sources
Translated from Spanish
Node.js Issues Security Releases for 26.x, 24.x and 22.x Fixing High-Severity TLS and Brotli Flaws
Node.js published security updates on October 21, 2026 for the 26.x, 24.x and 22.x release lines. The patches address multiple high-severity vulnerabilities affecting TLS hostname validation and the Brotli decoder, along with updates to critical dependencies including OpenSSL and Undici. Several CVEs cover bypasses in certificate hostname checks when IP addresses use full-width digits or when hosts resolve loosely to IP addresses. A particularly serious out-of-bounds write in the Brotli decoder (CVE-2026-111497) could enable remote code execution on services processing compressed responses. Additional fixes resolve keep-alive socket timing issues, DNS resolution truncation with NUL characters, and entropy caching problems in crypto.randomUUID and randomInt functions. The releases also update c-ares, Undici, OpenSSL, SQLite and ca-cert bundles following the eMudhra intermediate CA compromise.
Node.js Fixes High-Severity Brotli Decoder Flaw Leading to Remote Code Execution
A high-severity vulnerability in the bundled Brotli decoder of Node.js allows out-of-bounds writes when processing attacker-controlled compressed data, potentially resulting in remote code execution. The flaw, tracked as CVE-2026-111497, affects all supported branches including 22.x, 24.x, and 26.x prior to the October 21, 2026 security release. Patched versions 22.23.4, 24.22.1, and 26.12.1 address the memory corruption issue that arises during Brotli decompression in services accepting third-party content. The same update resolves additional high-severity problems, notably hostname validation weaknesses in TLS. Organizations using unsupported branches such as 18.x, 20.x, 23.x, and 25.x must migrate to maintained releases, while those linking against system Brotli libraries should verify inclusion of upstream commit 0ed4268. Security teams are advised to audit all environments, including containers and CI pipelines, that process Brotli-encoded data.
PHP Issues Emergency Patches for Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released urgent patches for two critical vulnerabilities collectively known as PHP2Shell that enable unauthenticated remote code execution on affected servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, score 9.2 on CVSS v4.0 and have already seen active exploitation attempts with malicious payloads adjusted to bypass WAF rules. The issues affect multiple PHP deployment methods including Apache with mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed, and do not require complex application code to be exploitable. CVE-2026-109618 involves a memory corruption chain leading to code execution under the web process privileges, while CVE-2026-109619 stems from an obsolete global state issue causing use-after-free conditions that can result in memory disclosure and code execution. Patched versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, with administrators advised to restart all persistent workers after updating. Temporary mitigations such as setting memory_limit to -1 and disabling session.upload_progress.enabled are available for environments that cannot patch immediately.
Cyberattack Exploits Exposed Danfoss Refrigeration Controllers Across French Supermarkets
A remote cyberattack targeted Danfoss AK-SM 8xxA Series controllers in French supermarkets, allowing attackers to manipulate refrigeration parameters and trigger defrost cycles that raised temperatures and spoiled food stock. The incident impacted an estimated 250 to 350 stores belonging to major chains including Intermarché, Carrefour Market, Leclerc, and others. Paris prosecutors have opened a large-scale investigation into the attack and associated damages, including potential fires. The root cause traces to outdated software on internet-exposed OT management interfaces, with multiple CVEs enabling authentication bypass and remote code execution. Thousands of similar Danfoss systems remain publicly accessible worldwide, highlighting persistent OT exposure risks. Immediate remediation steps include closing web consoles, enforcing VPN access, and applying updates to versions 4.2 and 4.3.1 or later.
Attackers Exploit Critical Atlassian Data Center Flaw CVE-2026-21589 Hours After PoC Release
Exploitation attempts against CVE-2026-21589 began almost immediately after technical details and a Nuclei template were published. The vulnerability allows unauthenticated arbitrary file read in multiple Atlassian Data Center products and carries a CVSS v4.0 score of 9.3. In environments integrated with Crowd, attackers who obtain crowd.properties can extract plaintext credentials and escalate to administrator privileges via the Crowd API. The flaw stems from improper handling of double-colon sequences in a shared web resource library, enabling path traversal against plugin resource endpoints. Affected products include Bitbucket Data Center, Confluence Data Center, Jira Software Data Center, Jira Service Management Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian urges immediate patching outside normal cycles and recommends WAF rules or Tomcat RewriteValve configurations to block traversal patterns. Organizations should also review access logs for double-decoded URLs containing .., /, \, or :: sequences.
LibreOffice and Apache OpenOffice Flaws Enable Remote Code Execution via Malicious Spreadsheets Without Macro Warnings
Two vulnerabilities, CVE-2026-63277 in LibreOffice Calc and CVE-2026-59265 in Apache OpenOffice, allow attackers to execute arbitrary code simply by tricking users into opening specially crafted spreadsheet files. The flaws exploit Java integration and class path handling, bypassing traditional macro security prompts entirely. LibreOffice has already released fixes in versions 26.2.5 and 26.8.0 that restrict class path entries to local file URLs only. Apache OpenOffice 4.1.16 and earlier remain vulnerable, with the stable patch expected in 4.1.17; interim mitigation requires disabling Java integration. The issues highlight risks in office suites that process untrusted documents containing external data connections or JDBC references. Organizations are advised to enforce least-privilege execution and avoid opening files from unknown sources until patches are applied.