AI Safety Guidelines: 10 Essential Rules to Protect Data, Finances, and Reputation When Working with LLMs
A detailed analysis of emerging AI-related security risks highlights how large language models can autonomously execute attack chains, fall victim to prompt injection, and cause cascading errors in complex workflows. The article examines real-world incidents such as the Anthropic vending machine pricing failure, the Meta Instagram account takeover via overly helpful AI support, and Copilot Studio data leaks through prompt injection. It emphasizes that while attack methods themselves are not revolutionary, AI agents can now scale them at machine speed with autonomous decision-making and recovery capabilities. The piece provides ten concrete safety rules covering financial controls, fact verification, data confidentiality, context pollution prevention, and access limitation. It also stresses that ultimate responsibility always remains with the human operator, not the AI system.
Translated from Russian
Read full articleLatest News
10 Services for Instant Video Meetings by Link Without Registration
The article reviews ten platforms designed for quick video calls that require minimal setup. Services such as Bitrix24 Sync and SaluteJazz stand out because they allow organizers and guests to join meetings without creating accounts. Other options like Yandex Telemost, VK Calls, Google Meet, Zoom, Microsoft Teams, Jitsi Meet, MTS Link, and Kontur.Talk offer varying levels of registration requirements, participant limits, and time restrictions on free plans. The comparison highlights differences in meeting duration, guest access policies, screen sharing, and integration with corporate tools. Practical advice is provided on testing connections, checking mobile support, and understanding technical limits that may affect long sessions. The review concludes that choosing the right service depends on team size, need for extended calls, and existing ecosystem preferences.
Translated from Russian
Dart and Flutter SDKs Patch Critical TLS Flaw Tied to Compromised eMudhra Certificates
Dart and Flutter teams released updates to block compromised intermediate certificates from the eMudhra certificate authority. The flaw affects applications built for Android, Windows, and Linux that rely on dart:io for HTTPS connections. Stable releases include Dart 3.13.7 and Flutter 3.47.8, while beta channels received Dart 3.14.0-315.3.beta and Flutter 3.50.0-0.2.pre. The root cause traces to insufficient randomness during key generation for eight eMudhra intermediate CAs disclosed in October 2026. Because dart:io uses its own BoringSSL implementation rather than system revocation lists, applications must be rebuilt and redistributed to users. Additional changes improve root certificate handling on Android 14 and later via Conscrypt APEX modules.
Translated from Russian
Dynamic Sites on Yandex Cloud Storage Enable Communication Under White-List Restrictions
A developer facing mobile internet white lists explored ways to exchange encrypted messages without relying on blocked infrastructure. Initial attempts with a national messenger bot failed due to poor API documentation and account hijacking. The team then modeled the problem as three neighboring plots where Alice and Bob route messages through Eve while a slow postman handles delivery. Yandex Disk was tested as a message store accessible via direct GET and POST requests, though it required accounts and suffered from 15-25 second latency. The final approach used Yandex Cloud object storage, whose domains remained whitelisted, allowing HTML files to load and function even when only government services and select platforms were reachable.
Translated from Russian
Notion Confirms Exposure of AI Assistant Transcripts After Fireworks AI Breach
Notion has confirmed that a security incident at Fireworks AI exposed conversation transcripts from its Notion AI assistant, affecting less than 1% of customer workspaces. The breach occurred because Fireworks handled classification tasks for the Insights feature and served open-weight models. Notion stated that its own systems were not compromised. The timeline shows initial notification on November 2, 2026, followed by disconnection of systems on November 3 and confirmation of customer data exposure on November 8. Most transcripts lacked author or workspace attribution and did not include tool call results, though user-entered content could still identify individuals or organizations. Fireworks attributed the intrusion to a financially motivated group engaged in LLMjacking, involving theft of credentials to hijack AI models for illicit use.
Translated from Portuguese
Ransomware Group BYOD Claims Theft of Toyota Customer Personal Data in Unverified Extortion Listing
A ransomware group calling itself BYOD has added Toyota to its victim list on a dark web extortion site, claiming to have stolen personal information belonging to the automaker’s customers. The announcement, updated on November 10, 2026, alleges access to full names, email addresses, physical addresses, telephone numbers, and dates of birth, along with data from the company’s self-service kiosk terminals. No independent verification of the claims has been performed, and the listing provides no details on the volume of records, affected regions, or specific business units involved. The group states that parts of the environment were isolated but claims residual remote access paths remained; however, the announcement contains no technical indicators or proof-of-compromise samples. Toyota has not issued any public statement confirming or denying the incident. The report notes that similar unverified listings are sometimes used to pressure victims into negotiations and may include repackaged data from prior breaches. This marks a contrast with Toyota’s 2023 public disclosure of a separate cloud misconfiguration incident that the company itself reported.
Translated from Portuguese
Deepfake Videos for Business Attacks Drop to Just $5 per Minute as AI Costs Plummet
The cost of creating convincing deepfake videos for attacks on companies has fallen roughly 100 times over the past two years. A single minute of high-quality fake video can now be produced for as little as $5, compared with several hundred dollars previously. The drop in prices was reported by Russian newspaper Izvestia, which also noted that underground marketplaces now sell ready-made templates that further reduce expenses. Lower prices significantly lower the barrier for criminals to conduct business email compromise and CEO impersonation scams. Experts warn that recognizable faces combined with urgent requests for wire transfers or credential sharing make traditional verification methods less reliable. Organizations are advised to confirm all financial instructions through an independent, pre-established channel rather than relying on video calls alone.
Translated from Russian
Rawline Aggregates VK, MAX, DNS and Other Tunnels into One Multi-Platform VPN Client
Rawline is a new multi-platform client that combines various VPN protocols and non-standard transports into a single application for Android, Windows, Linux and macOS. The project is built on Throne using sing-box and Xray network cores and supports both conventional protocols and unusual transports such as VK and MAX calls, WebRTC, DNS and S3. Users can import profiles via links or QR codes, test latency, chain connections and apply per-app or per-domain routing rules. The developer paid special attention to security issues, removing unnecessary local proxy endpoints, protecting internal connections with random passwords and adding traffic ownership verification that is enabled by default on Android 10 and newer. Additional fixes were implemented after discovering that some transport bridges could be hijacked by external applications sending the first UDP packet. Source code and builds are available on GitHub.
Translated from Russian
Vulnerability Management Evolution: From Manual Scans to Continuous Threat Exposure Management
This final installment of the Vulnerability Management for Beginners series examines how the discipline has transformed over recent years into an essential component of organizational risk management. The article highlights the dramatic increase in disclosed vulnerabilities, now approaching 48,000 per year, and stresses that fewer than one percent pose real-world risk. It details the shift toward automated asset inventory integrated with SIEM, EDR, and CMDB systems, alongside multi-factor prioritization combining CVSS, EPSS, KEV lists, and FSTEC methodologies. New practices such as EASM, automated penetration testing, BAS, and CTEM are presented as extensions of a mature foundational process rather than replacements. The piece also covers regulatory tightening in Russia through FSTEC Order No. 117, mandatory remediation timelines, and the impact of AI on both defense and attack surfaces. It concludes with a practical Monday-morning action list focused on asset counting, threat feed integration, SLA definition, and cross-team coordination between IT and security.
Translated from Russian
Beget Outlines Four-Stage Recovery of Servers After Cyberattack Destroys Cloud Infrastructure
Russian hosting provider Beget has provided an update on restoring its infrastructure following a destructive cyberattack that occurred on the night of November 2, 2026. Attackers gained access to the management contour and executed wiping scripts, resulting in total data loss across VPS, S3, and Kubernetes environments while file-level backups of VPS remained intact. The company is now recovering dozens of virtual hosting servers from backups in parallel using multiple data streams. Each affected server undergoes a structured four-stage restoration process that includes OS installation, environment setup, data loading, and gradual reactivation of thousands of customer sites. Beget has already brought more than 18,000 websites back online, with 66 servers currently in the recovery pipeline. The Coordination Center for .RU and .RF domains has temporarily suspended Beget’s registrar accreditation, preventing new registrations during the suspension period.
Translated from Russian
From Russian sources
Translated from Russian
What Every Programmer Should Know About Stack Buffer Overflows on Windows
The article provides a practical, step-by-step guide to understanding stack buffer overflow attacks under Windows, using the unsafe scanf function as the primary example. It explains how unlimited input can overwrite adjacent memory structures, including return addresses stored on the stack. Detailed coverage of process memory layout, assembly instructions, the RIP register, stack frames, and calling conventions shows exactly how control flow can be hijacked. The tutorial demonstrates live debugging with WinDbg, showing how input can corrupt the return address and trigger crashes. It also covers modern compiler protections such as MSVC stack canaries that detect overwrites before they allow exploitation. The piece emphasizes why developers must validate buffer sizes and how these classic vulnerabilities remain relevant despite defensive mechanisms.
NIST Publishes Draft Taxonomy SP 2400-102 for Attacks on AI Agents
The National Institute of Standards and Technology released the first public draft of SP 2400-102 E2026 on 9 November 2026, extending its 2025 machine learning attack taxonomy with a dedicated chapter on AI agents. The document provides a common terminology for attacks targeting task formulation, planning, tool execution, and result interpretation stages. Attack goals include availability disruption through infinite tool calls, integrity violations that alter outputs or trigger unauthorized actions, sensitive data disclosure, and malicious agent misuse. Vectors range from direct user prompt bypasses and supply-chain model poisoning to indirect prompt injection via untrusted documents, persistent memory poisoning, compromised tools, and inter-agent message spoofing. NIST also examines layered defenses combining model-level detection of parasitic instructions with system-level restrictions, tool isolation, and human confirmation for high-impact operations. The draft references OWASP LLM03:2026 Excessive Agency and aligns with Russian standards GOST R 56939-2024 and GOST R 59276-2020 for testing and trust evaluation. Comments are accepted until 18 December 2026 before final publication.
Heterogeneous IT Infrastructure Management Persists Among Russian Companies
A recent AM Live viewer poll revealed that 54% of participants manage their heterogeneous IT infrastructure only partially, with just 3% achieving unified control across multiple vendors. The discussion took place during the broadcast titled 'IT Ecosystems: Convenience, Savings, or Dependency?' and highlighted ongoing challenges in the Russian market amid import substitution efforts involving companies such as Orion Soft and Astra Group. 23% of respondents reported using separate platforms with independent management, while 16% relied on a single vendor's unified ecosystem. Key drivers for interest in unified platforms included automation needs (78%), cost reduction (64%), compatibility issues (61%), and specialist shortages (53%). Experts Sergey Rychikhin and Alexander Gavrilenko emphasized that true ecosystems require technological integration, consistent user experience, scalable architecture, and unified support rather than simple branding alignment. Recommendations included clearly defining integration requirements and exit conditions in contracts to mitigate vendor lock-in risks.
Fake ITSM Tickets Allow Attackers to Trick AI SOC Agents into Dismissing Real Incidents
An experiment with the DeepSeek model showed that AI agents in Security Operations Centers can be reliably deceived by forged change-management tickets rather than classic prompt injection. Attackers with limited rights edit already-approved tickets in an ITSM system, changing the server and maintenance window while preserving the “Approved” status. The agent reads the ticket, matches the observed actions to the documented work, and automatically closes the alert. Human analysts reviewing the closed case later see only the reassuring link to the ticket and may also accept the decision. Three common LLM-based defenses—strict prompting, a secondary critic model, and supplying audit logs—either blocked too many legitimate changes or still allowed a quarter of attacks through. Only a deterministic code gate that cross-checks the ticket against immutable logs, role directories, and time windows achieved zero false closures on the test set while still automating 97 percent of genuine maintenance events.
Pentester Shares Experience Mistaking HTTP 500 Response for Remote Code Execution on Live React and Node.js Application
A security researcher published an account of their first real-world penetration test on a live website built with ReactJS and Node.js. On the fourth day of testing, the author encountered an HTTP 500 error that initially appeared consistent with a successful remote code execution attempt. The article describes the researcher's process of investigating the response and realizing the error was unrelated to code execution. The post highlights common pitfalls when interpreting server responses during active assessments. It also notes the use of standard web technologies and the researcher's intent to share lessons from the engagement. The publication is presented as a case study from the Habr platform.
Apple Patches iMessage Group Chat Flaws Allowing Remote Attackers to Join Conversations
Apple has released security updates addressing multiple vulnerabilities that could allow unauthorized access to iMessage group chats. The fixes cover two specific issues tracked as CVE-2026-113961 and CVE-2026-113960, both discovered by an anonymous researcher. One flaw stemmed from insufficient authorization checks, while the second involved vulnerable code that could expose prior messages to new participants. Patches are included in iOS and iPadOS 27.2.1 as well as version 26.7.3. Additional fixes address Bluetooth pairing bypasses, AirPlay restrictions, and a memory corruption issue in the Brotli compression library. Apple has not confirmed any in-the-wild exploitation of these bugs.
From Japanese sources
Translated from Japanese
Fortinet Discloses Eight FortiOS Vulnerabilities Including Three Critical Flaws
Fortinet has published security advisories detailing eight vulnerabilities affecting its FortiOS operating system used in UTM appliances. Three of the issues received the highest severity rating of Critical. CVE-2026-126259 allows unauthenticated command execution with super-admin privileges in FGSP combined with configuration synchronization or auto-scale setups via crafted HA packets. CVE-2026-126254 stems from integer truncation in the BGP daemon and can propagate malicious attributes from configured iBGP peers. CVE-2026-126253 enables authentication bypass in the OSPF daemon, permitting unauthenticated LSA injection. The remaining five vulnerabilities were assigned lower severity ratings. Administrators are urged to apply the available patches promptly.
Microsoft Patches Over 1,000 Vulnerabilities in November 2026 Patch Tuesday Release
Microsoft has issued its November 2026 monthly security updates, addressing a total of 1,093 vulnerabilities across Windows, Office, Azure, SQL Server, SharePoint Server, Exchange Server, and Developer Tools. The update also covers a vulnerability in the third-party Tencent RapidJSON library identified as CVE-2026-124586. Among the fixes, 63 vulnerabilities received the highest severity rating of Critical, while 1,029 were rated Important. Privilege escalation issues accounted for the largest share with 535 cases, followed by 296 remote code execution flaws. Several vulnerabilities have already been confirmed as exploited in the wild. The release follows the standard Patch Tuesday schedule on the second Tuesday of the month.
Critical and High-Severity Privilege Escalation Flaws Patched in Zoom Workplace for Windows
Zoom has disclosed two vulnerabilities affecting its Windows version of Zoom Workplace that could allow unauthenticated attackers to escalate privileges over the network. CVE-2026-108186 received a CVSS v3.1 base score of 9.6 and is rated Critical due to improper input validation. CVE-2026-108187 carries a CVSS score of 8.1 and is rated High because of an origin validation issue. Both flaws were addressed in security updates released by the vendor. Organizations are urged to apply the latest patches immediately to eliminate the risk of remote exploitation without authentication.
Plex Media Server Vulnerabilities Exploited in Wild via Plex2Shell Chain
Plex has disclosed active exploitation of four vulnerabilities in Plex Media Server versions 1.43.2 and earlier. The flaws, tracked as CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656, allow unauthenticated remote code execution when chained together. Attackers are leveraging server-side request forgery and token-handling weaknesses to write arbitrary files on exposed servers. Proof-of-concept code named Plex2Shell was published on 16 October, after which CISA added the issues to its Known Exploited Vulnerabilities catalog. Compromised systems have been observed deploying cryptocurrency miners and proxy relays. The software is widely used both as a standalone media server and as an add-on for QNAP and other NAS devices, increasing the potential attack surface.
Google Issues Chrome Security Update Fixing Nine Vulnerabilities Including Zero-Day Exploit
Google has released a security update for its Chrome browser that addresses nine vulnerabilities, one of which is a zero-day flaw already being exploited in the wild. The update covers Windows, macOS, and Linux platforms with versions 157.0.8103.51 and 157.0.8103.50. Seven of the issues are rated High severity, while two are rated Medium. The zero-day vulnerability CVE-2026-125350 is a Use After Free flaw in XML processing that was reported on November 6. Additional fixes address similar Use After Free issues, type confusion in the V8 engine, out-of-bounds writes in GPU, and problems in WebGL, FileSystem, and Compositing components.
Multiple Critical Vulnerabilities Found in OpenAM Identity Platform
Open Identity Platform disclosed 18 vulnerabilities in its OpenAM identity management platform on October 22, 2026. Three of these issues received the highest severity rating of Critical. The vulnerabilities were fixed in the OpenAM 16.1.4 release. One Critical flaw tracked as CVE-2026-123551 affects the WebSocket notification service used for session start and end events. Attackers can bypass authentication checks on WebSocket connections to leak user session tokens, enabling full session hijacking including for administrator accounts. V ulnCheck assigned a maximum CVSS v4.0 base score of 10.0 to this issue.
From Portuguese sources
Translated from Portuguese
Santos Port Authority Systems Offline After Suspected Cyber Incident and Possible Ransom Demand
The systems of Autoridade Portuária de Santos (APS), which manages Brazil's largest port, have been unavailable since the morning of November 6, 2026. The outage began after a power fluctuation that affected servers and later recurred despite initial restoration efforts. APS has confirmed a suspected cyber incident but has not determined the full scope or whether data was accessed. Local reporting indicates that alleged attackers demanded financial ransom to restore operations, though this claim remains unconfirmed by APS or federal police. Backups have been sent for forensic examination while Serpro technicians assist in recovery. Port operations continue using manual procedures and heightened security measures, but vessel and truck wait times have increased significantly.
CISA and FBI Warn of Global Cyber Attacks on Industrial Refrigeration and Cold Chain Controllers
CISA, the FBI, and multiple U.S. agencies issued a joint advisory on November 5 detailing malicious cyber activity targeting industrial refrigeration systems and cold chain monitoring equipment worldwide. Attackers are exploiting unpatched or internet-exposed temperature controllers in supermarkets and cold storage facilities through authentication bypass, arbitrary code injection, and weak configurations. Once inside the control panels, threat actors force units into continuous heating and defrost cycles, the opposite of their intended function, while also causing denial of visibility that prevents operators from seeing real equipment status. The advisory highlights risks including reduced system lifespan, fire hazards, stock loss, and potential consumer harm from spoiled products stored outside safe temperature ranges. Sectors most affected include public health, chemical manufacturing, food and agriculture, and refrigerated transportation. Recommended mitigations focus on network segmentation, removal of remote access from the public internet, strong authentication, firmware updates, and regular offline backups.
Critical Flaw in React Server Components Enables Unauthenticated Remote Code Execution
The React team disclosed security advisory GHSA-xqc2-xf4c-x3h3 describing a high-impact vulnerability in React Server Components that can lead to remote code execution. The flaw affects packages react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack across multiple version ranges from 19.0.0 through 19.3.0. Exploitation requires no authentication, privileges, or user interaction, allowing a remote attacker to execute code on the server by sending a specially crafted request containing multiple typed arrays alongside attacker-controlled data. No CVE identifier was assigned, and the advisory notes that the issue is distinct from the previously reported React2Shell vulnerability tracked as CVE-2025-55182. Affected applications are limited to those running React code on the server with supported frameworks and bundlers; client-only React usage is unaffected. Patches are available in versions 19.0.9, 19.1.10, 19.2.9, and 19.3.1, with immediate updates strongly recommended. The React team also linked similar typed-array handling issues in Next.js Cache Components, suggesting a broader class of errors.
Vulnerability in Anthropic Claude Dispatch Allowed Browser Extensions to Execute Code on Host Machine
Security researchers disclosed a flaw in Anthropic's Claude Dispatch feature on November 6, 2026. The issue enabled any browser extension with script execution rights on claude.ai to issue commands to the Claude Desktop agent as if they originated from the legitimate user. Because the Dispatch component trusted any authenticated browser session without additional visible binding to the desktop application, malicious scripts could trigger installation of packages or other actions on the local system. The proof-of-concept required only an authenticated user, an active Dispatch session, and a malicious extension; the researchers demonstrated installation of an npm package that launched the Calculator application. The same technique could have been used to exfiltrate files or deploy backdoors given the agent's existing permissions on the endpoint. Anthropic accepted the report in May 2026, later confirmed it duplicated an internal finding, and retired the Dispatch feature by late October 2026. Researchers recommend disabling cross-device Dispatch when unnecessary and carefully managing paired devices.
WordPress Core Update Flaw Draws Over 240,000 Attack Attempts Since Patch Release
Wordfence has blocked more than 240,000 attack attempts targeting a race condition vulnerability in the WordPress core update process, tracked as CVE-2026-119977 with a CVSS score of 8.1. The attempts began on October 28, the same day WordPress issued the fix, with a single-day peak exceeding 74,000 blocked requests. The flaw allows attackers to exploit predictable temporary upgrade files during the automatic core update, enabling them to complete an installation, create an administrator account, and upload malicious PHP code without any existing credentials. The vulnerability affects branches from version 4.7 through 7.1.3, with the fix available in 7.1.4 and backported releases for older lines. Because automatic updates are enabled by default on most sites, the exposure window opens silently during routine maintenance. Security researchers emphasize that the high volume of attempts does not confirm successful compromises, urging administrators to review user lists and modified files after any core update since late October.
Citrix Issues Critical XenServer Patches for Host Compromise Vulnerabilities
Citrix published security bulletin CTX697256 on November 3, 2026, disclosing eight vulnerabilities affecting XenServer. The most severe issue, tracked as CVE-2026-98432 and rated critical, enables an unauthenticated attacker who reaches the management network to compromise the virtualization host and associated appliances. A second flaw, CVE-2026-102703, allows a privileged user inside a guest virtual machine to break out and take control of the underlying host, violating isolation guarantees. Six additional vulnerabilities impact network boot and secure boot processes, potentially allowing attackers to compromise VMs during startup or bypass code-signing policies. Affected products include XenServer 8.4 and 9 along with Workload Balancing and Conversion Manager appliances. Citrix recommends immediate application of the fixes and temporary isolation of the management network while updates are deployed.
From Chinese sources
Translated from Chinese
Over a Dozen AI Platforms Breached in One Month for API Keys in LLM-Jacking Operations
Between late September and early November, at least a dozen AI developer platforms were compromised in a coordinated campaign targeting API access tokens rather than customer data. Affected organizations include Andromeda, NVIDIA Brev, CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, Zeabur, Chainstack, and WorkOS. Attackers exploited third-party components and internal sales applications to reach stored credentials used for AI inference services. The stolen tokens enable LLM-jacking and model distillation activities, with multiple threat groups observed reusing the same credentials shortly after disclosure. The open-source penetration testing framework Artex was used to automate reconnaissance and exploitation, lowering the barrier for less skilled actors. Companies such as Chainstack and WorkOS confirmed the incidents through their own disclosures, highlighting risks in non-core systems that store high-value AI credentials.
Stolen Credentials Poison cPGuard Update Channel, Turning Security Software into Data Theft Backdoor
Attackers used compromised OPSSHIELD credentials to hijack the cPGuard update distribution network on November 2 at 02:06 UTC, injecting malicious scripts into versions 5.88.12 through 5.88.19. The poisoned updates targeted Linux servers running the security tool, which holds root privileges on hosting provider and cloud infrastructure machines. The script harvested /etc/shadow, /etc/passwd, MariaDB/MySQL root credentials from my.cnf, root shell history containing API tokens, and SSH authorized_keys files before exfiltrating them via the vendor's own infrastructure. A persistent backdoor was also dropped at /var/tmp/.cpg91511_sh. OPSSHIELD detected the intrusion within 12 hours and halted distribution, but confirmed that 32 customer servers had their data accessed. The incident highlights risks of relying on static credentials for security product update pipelines without code signing or behavioral restrictions.
Lost Control Series Highlights Realistic Social Engineering Attacks Disguised as Workplace Documents
A new micro-film in the Lost Control series demonstrates how employees can be tricked into compromising their organizations by opening files that appear to be routine work documents such as layoff lists, internal notices, or tax inspection alerts. The six-minute video recreates authentic attack vectors including phishing emails, fake download sites, bundled legitimate software packages, and phishing websites, as documented in five recent cases released by China's Ministry of Public Security Cyber Security Bureau. These attacks succeed because they mimic normal business communications rather than obvious malware delivery methods. The producers recommend sharing the film internally, reviewing work group messages from the past 30 days for suspicious attachments labeled as personnel lists or official notices, and verifying any such files before opening them. Organizations whose annual security training lacks measurable improvement in employee detection rates are invited to contact Allsec for assessment. Victims who have already clicked links or transferred funds are advised to call the national anti-fraud hotline 96110 immediately. The content is AI-generated with artistic modifications based on publicly reported incidents.
AI Agents Rewrite SaaS Monetization Models as Marketplace Platforms Drive Global ISV Growth
The 2026 narrative of SaaS apocalypse driven by AI has reversed following strong earnings from major vendors. Companies including Salesforce, Palantir, Kingdee and Yonyou began reporting AI-related revenue, while IDC and Nvidia CEO Jensen Huang argued that AI agents amplify rather than replace software. At the 2026 Amazon Web Services Software Enterprise Summit in Shenzhen, AWS launched an ISV go-global accelerator and six new AI agents on Marketplace to streamline sales, compliance and partner management. Marketplace now hosts over 30,000 products from 6,000 sellers, with Agentic AI listings growing from 800 to more than 3,000 since July 2025. Chinese ISVs such as PingCAP, Zilliz, Manus and Plaud AI are shifting from simple listings to localized operations and bundled solutions. The platform projects hundreds of billions in transaction volume for 2026, supported by a network of 130,000 global partners. Industry leaders emphasize that future growth depends on embedding AI as core product logic rather than add-on chat interfaces.
WorkBuddy Charts Next Phase Focused on Openness and Connectivity
WorkBuddy has announced its strategic direction for the upcoming development cycle. The company stated that its next steps will prioritize openness and stronger connections across its platform and ecosystem. No technical details, security implications, or product specifications were provided in the announcement. The move appears to be a general business and product strategy update rather than a cybersecurity-related disclosure.
Binance Hit by Record $6.3 Billion Theft After Engineer Laptop Compromise
Binance suffered what could become the largest crypto theft in history, with approximately $6.3 billion in assets drained from exchange wallets over three days in late October. On-chain analysts at Arkham and Glassnode first detected the movement of $5.3 billion, including $1.66 billion in USDT, 17,985 ETH worth $1.45 billion, and $767 million in USDC. Binance confirmed the incident, halted deposits and withdrawals, froze around $3 billion on-chain with law enforcement and partners, and pledged to cover all losses from its SAFU fund. The root cause was traced to a compromised laptop belonging to a development operations engineer, allowing attackers to access a service container and issue authorized-looking withdrawal transactions without any private key exposure. The attack bypassed traditional cold wallet protections by impersonating legitimate privileged access rather than stealing cryptographic keys. Industry observers note this highlights systemic risks in developer endpoint security, long-lived credentials, and control-plane protections across exchanges.
From Spanish sources
Translated from Spanish
Node.js Issues Security Releases for 26.x, 24.x and 22.x Fixing High-Severity TLS and Brotli Flaws
Node.js published security updates on October 21, 2026 for the 26.x, 24.x and 22.x release lines. The patches address multiple high-severity vulnerabilities affecting TLS hostname validation and the Brotli decoder, along with updates to critical dependencies including OpenSSL and Undici. Several CVEs cover bypasses in certificate hostname checks when IP addresses use full-width digits or when hosts resolve loosely to IP addresses. A particularly serious out-of-bounds write in the Brotli decoder (CVE-2026-111497) could enable remote code execution on services processing compressed responses. Additional fixes resolve keep-alive socket timing issues, DNS resolution truncation with NUL characters, and entropy caching problems in crypto.randomUUID and randomInt functions. The releases also update c-ares, Undici, OpenSSL, SQLite and ca-cert bundles following the eMudhra intermediate CA compromise.
Node.js Fixes High-Severity Brotli Decoder Flaw Leading to Remote Code Execution
A high-severity vulnerability in the bundled Brotli decoder of Node.js allows out-of-bounds writes when processing attacker-controlled compressed data, potentially resulting in remote code execution. The flaw, tracked as CVE-2026-111497, affects all supported branches including 22.x, 24.x, and 26.x prior to the October 21, 2026 security release. Patched versions 22.23.4, 24.22.1, and 26.12.1 address the memory corruption issue that arises during Brotli decompression in services accepting third-party content. The same update resolves additional high-severity problems, notably hostname validation weaknesses in TLS. Organizations using unsupported branches such as 18.x, 20.x, 23.x, and 25.x must migrate to maintained releases, while those linking against system Brotli libraries should verify inclusion of upstream commit 0ed4268. Security teams are advised to audit all environments, including containers and CI pipelines, that process Brotli-encoded data.
PHP Issues Emergency Patches for Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released urgent patches for two critical vulnerabilities collectively known as PHP2Shell that enable unauthenticated remote code execution on affected servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, score 9.2 on CVSS v4.0 and have already seen active exploitation attempts with malicious payloads adjusted to bypass WAF rules. The issues affect multiple PHP deployment methods including Apache with mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed, and do not require complex application code to be exploitable. CVE-2026-109618 involves a memory corruption chain leading to code execution under the web process privileges, while CVE-2026-109619 stems from an obsolete global state issue causing use-after-free conditions that can result in memory disclosure and code execution. Patched versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, with administrators advised to restart all persistent workers after updating. Temporary mitigations such as setting memory_limit to -1 and disabling session.upload_progress.enabled are available for environments that cannot patch immediately.
Cyberattack Exploits Exposed Danfoss Refrigeration Controllers Across French Supermarkets
A remote cyberattack targeted Danfoss AK-SM 8xxA Series controllers in French supermarkets, allowing attackers to manipulate refrigeration parameters and trigger defrost cycles that raised temperatures and spoiled food stock. The incident impacted an estimated 250 to 350 stores belonging to major chains including Intermarché, Carrefour Market, Leclerc, and others. Paris prosecutors have opened a large-scale investigation into the attack and associated damages, including potential fires. The root cause traces to outdated software on internet-exposed OT management interfaces, with multiple CVEs enabling authentication bypass and remote code execution. Thousands of similar Danfoss systems remain publicly accessible worldwide, highlighting persistent OT exposure risks. Immediate remediation steps include closing web consoles, enforcing VPN access, and applying updates to versions 4.2 and 4.3.1 or later.
Attackers Exploit Critical Atlassian Data Center Flaw CVE-2026-21589 Hours After PoC Release
Exploitation attempts against CVE-2026-21589 began almost immediately after technical details and a Nuclei template were published. The vulnerability allows unauthenticated arbitrary file read in multiple Atlassian Data Center products and carries a CVSS v4.0 score of 9.3. In environments integrated with Crowd, attackers who obtain crowd.properties can extract plaintext credentials and escalate to administrator privileges via the Crowd API. The flaw stems from improper handling of double-colon sequences in a shared web resource library, enabling path traversal against plugin resource endpoints. Affected products include Bitbucket Data Center, Confluence Data Center, Jira Software Data Center, Jira Service Management Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian urges immediate patching outside normal cycles and recommends WAF rules or Tomcat RewriteValve configurations to block traversal patterns. Organizations should also review access logs for double-decoded URLs containing .., /, \, or :: sequences.
LibreOffice and Apache OpenOffice Flaws Enable Remote Code Execution via Malicious Spreadsheets Without Macro Warnings
Two vulnerabilities, CVE-2026-63277 in LibreOffice Calc and CVE-2026-59265 in Apache OpenOffice, allow attackers to execute arbitrary code simply by tricking users into opening specially crafted spreadsheet files. The flaws exploit Java integration and class path handling, bypassing traditional macro security prompts entirely. LibreOffice has already released fixes in versions 26.2.5 and 26.8.0 that restrict class path entries to local file URLs only. Apache OpenOffice 4.1.16 and earlier remain vulnerable, with the stable patch expected in 4.1.17; interim mitigation requires disabling Java integration. The issues highlight risks in office suites that process untrusted documents containing external data connections or JDBC references. Organizations are advised to enforce least-privilege execution and avoid opening files from unknown sources until patches are applied.