AI Safety Guidelines: 10 Essential Rules to Protect Data, Finances, and Reputation When Working with LLMs
A detailed analysis of emerging AI-related security risks highlights how large language models can autonomously execute attack chains, fall victim to prompt injection, and cause cascading errors in complex workflows. The article examines real-world incidents such as the Anthropic vending machine pricing failure, the Meta Instagram account takeover via overly helpful AI support, and Copilot Studio data leaks through prompt injection. It emphasizes that while attack methods themselves are not revolutionary, AI agents can now scale them at machine speed with autonomous decision-making and recovery capabilities. The piece provides ten concrete safety rules covering financial controls, fact verification, data confidentiality, context pollution prevention, and access limitation. It also stresses that ultimate responsibility always remains with the human operator, not the AI system.
Translated from Russian
Read full articleLatest News
Wireshark Wi-Fi Traffic Analysis: Diagnosing Connectivity Failures in 802.11 Networks
Wireshark captures help distinguish between radio-layer issues, DHCP failures, and application-layer problems when a device connects to Wi-Fi but cannot load pages. The guide explains how to select the right capture point—client, monitor-mode adapter, or wired side of the access point—and why ordinary Ethernet headers often hide critical 802.11 management and control frames. Detailed sections cover CSMA/CA contention, frame types (Management, Control, Data), EAPOL-Key exchanges for WPA2-Personal, and the limitations of retry flags as loss indicators. Practical Linux commands using iw, dumpcap, and NetworkManager demonstrate how to enable monitor mode on channel 6 HT20 and record a two-minute trace. Filters for wlan.addr, eapol, and wlan.fc.retry allow analysts to isolate association failures, key-handshake problems, or DHCP delays. The article also addresses decryption of WPA2 traffic with a known passphrase and warns that Wireshark cannot replace a spectrum analyzer for detecting non-Wi-Fi interference.
Translated from Russian
15-Year-Old Developer Restores Social Network After Beget VPS Data Wipe in Cyber Attack
A 15-year-old Russian developer recovered his social network Agora within three hours after hosting provider Beget confirmed that a cyber attack had wiped his VPS, including binary backups. The recovery relied on offsite encrypted PostgreSQL dumps created just one day earlier using pg_dump and GPG, an escrow key for end-to-end encrypted messages, and pre-written migration scripts stored in a repository. The master encryption key stored only in the server environment was lost, rendering old private keys unusable and forcing a full re-encryption of 1218 messages via the escrow mechanism. Additional issues included broken authentication in existing Android builds, dead push notification subscriptions, and a failed monitoring runner hosted on the destroyed server. The incident highlighted the risks of single-provider architecture and insufficient offline key storage while demonstrating effective disaster recovery practices for a self-hosted Supabase stack.
Translated from Russian
AI as a Control System: How States, Intelligence Agencies and Scammers Manipulate Consciousness Through Data and Personalization
Specialized AI models now reach exceptional accuracy in narrow domains and are deployed across marketing, banking, law enforcement, modeling and research. These systems do more than recommend products; they can predict a user’s intention to switch providers weeks in advance, build detailed psychological profiles, and select the optimal key to influence behavior through preferred services and content. Corporations collect telemetry including clicks, input-device movements, retinal reactions, spoken words and typing patterns, creating unique behavioral signatures comparable to fingerprints. By combining data from insurance records, credit bureaus, medical files, diaries, maps and gaming platforms, companies construct individual portraits that allow them to infer sensitive attributes even when direct records are missing. The article explains how aggregated data improves model generalization while individualized data enables ever more precise targeting, turning information itself into a product that can implant fears, desires and even compel people to defend foreign interests at personal cost. It warns that repeated exposure to surveillance warnings leads to desensitization, making it essential to re-examine the power these datasets confer.
Translated from Russian
Mercado Bitcoin Freezes $11 Million After Hacker Drains Hot Wallets Across Multiple Chains
Mercado Bitcoin detected a security incident in the early hours of November 2, 2026, and quickly blocked approximately $11 million in assets to prevent further losses. The exchange confirmed that hot wallets connected to the internet were targeted, allowing unauthorized transactions to spread funds across 17 different networks. Chainalysis, Arkham, and several stablecoin issuers including Tether, Circle, and Paxos collaborated to freeze around $10 million, primarily in stablecoins. The company stated that no customer funds were lost and no data was leaked, though the exact method used by the attackers remains undisclosed. Different analytics firms reported varying totals, with estimates ranging from $38 million to $49 million in total movement. Mercado Bitcoin has committed to absorbing identified losses and restoring services only after full security is ensured.
Translated from Portuguese
HackerSec Launches Pentest Superintelligence Using Orchestrated Frontier AI Models
HackerSec has introduced Pentest Superintelligence, a new offensive cybersecurity methodology that orchestrates multiple high-capacity frontier AI models within a single pentest operation. This builds on the company's earlier Pentest AI-First and Pentest AI-Native approaches by requiring at least two frontier models coordinated through a proprietary runtime. The Yaga autonomous agent serves as the core platform, using a custom harness to integrate models from OpenAI, Anthropic, and xAI while preserving operational context from reconnaissance through exploitation. In internal YagaBench evaluations, the six-model orchestrated setup achieved 98 percent resolution of black-box scenarios compared to 40.5 percent for the best single model. All testing remains within authorized scopes with human oversight for result validation. The development shifts industry focus from merely adding AI to tools toward proving effective multi-model coordination and verifiable impact.
Translated from Portuguese
Proving Vulnerability Management Works: MTTR Metrics, Maturity Models, and Real-World Testing
This article explains how organizations can measure the effectiveness of their vulnerability management programs using key metrics like MTTR, coverage, and maturity levels. It emphasizes that without proper measurement, even advanced scanners and skilled teams cannot confirm whether the process is functioning or stalling. The piece highlights MTTR as the primary metric for executive discussions because it directly correlates with real-world exploit timelines. Industry benchmarks from Verizon DBIR 2026, Edgescan 2025, Bitsight 2024, and Qualys show that remediation often takes months, far exceeding regulatory requirements such as FSTEC Order 117. A five-level maturity ladder is presented, ranging from chaos to continuous CTEM, to help teams assess progress. The article concludes that simulated attacks and red team exercises provide the most honest validation of VM effectiveness beyond dashboard numbers.
Translated from Russian
Developer Creates Personal Task Manager Allowing Claude Code and OpenCode Agents to Autonomously Execute Marked Tasks
A developer has built a personal task management system at shar8.app that integrates directly with AI coding agents including Claude Code, Codex CLI, and OpenCode through the Model Context Protocol. Tasks marked with an 'Agent' flag are automatically picked up by scheduled agent runs, executed locally on the user's machine, and results are written back into the task notes for human review. The system supports both browser-based OAuth authentication and persistent bearer tokens for headless cron or CLI usage, with strict separation between human-initiated and agent-initiated actions. Security measures include treating task text as untrusted data rather than instructions, disabling all tools by default, and requiring explicit allow-lists for any external actions such as web search. The implementation uses a custom MCP server exposing fifteen specific tools for listing, creating, editing, and delegating tasks, while a companion plugin for Claude Code handles scheduled execution via native system schedulers like launchd and systemd timers. The author emphasizes that agents never assign work to themselves and that final task closure always remains with the human user.
Translated from Russian
Scammer Leverages Unstoppable Domains to Redirect ATOM Transfers via Fake IBC Address
A journalist investigating a Telegram crypto investment pitch discovered an elaborate social engineering scheme that abused Unstoppable Domains. The scammer instructed the target to append -ibc.x to a shared Bybit XRP deposit address, causing the Edge wallet to resolve the string as a Web3 domain pointing to an attacker-controlled Cosmos address. The technique exploited Bybit’s shared deposit infrastructure and the wallet’s native support for Unstoppable Domains records. Analysis of the receiving Cosmos wallet showed 147 incoming ATOM transactions totaling more than 22,000 tokens between July and October. The author subsequently registered several .x and .crypto domains to demonstrate legitimate use of the same resolution mechanism in Edge, Trust Wallet, and OKX Wallet.
Translated from Russian
WordPress Core Update RCE Vulnerability CVE-2026-119977 Actively Exploited, CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution flaw in WordPress to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The vulnerability, tracked as CVE-2026-119977, resides in the core update mechanism and allows attackers to predict temporary file paths created during package updates, enabling unauthorized code execution from external sources. Wordfence assigned the flaw a CVSS v3.1 base score of 8.1 and reported blocking over 13,000 exploitation attempts targeting its customers within a single 24-hour period. The issue was addressed in the WordPress 7.1.4 release on October 28, 2026, with backports now being rolled out to all branches from version 4.7 onward. CISA has set a three-day remediation deadline of November 6, 2026, for U.S. federal agencies and instructed them to investigate potential compromises. Security researchers note that the attack leverages predictable temporary file locations during the update process, making it particularly dangerous for unpatched installations.
Translated from Japanese
From Russian sources
Translated from Russian
T-Bank Warns Customers of Payment and Transfer Outages
On November 3, T-Bank notified users that payments and transfers may fail due to ongoing technical issues. The bank placed an in-app message stating that the problems are being fixed. Clients confirmed the disruption through reports to Interfax, noting that the online banking interface displays the warning upon login. The outage affects only payments and transfers, while other banking services remain available. No details were provided regarding the root cause, the number of impacted users, or an estimated time for full recovery. Monitoring service DETECTOR404 also recorded the incident, aligning with user complaints and the bank's official notice.
Binance Details Multi-Stage Social Engineering Attack Involving Fake Job Interviews and Malware-Laden Repositories That Resulted in $6.3 Billion Theft
Binance has disclosed new details about a sophisticated attack that allowed threat actors to steal $6.3 billion from the cryptocurrency exchange. The operation began when an engineer was contacted via a job platform by an individual posing as a project lead, followed by an interview conducted through a messenger with a supposed company executive. The fake company provided a test assignment hosted in a repository that contained actual malicious code, leading to device compromise. Attackers combined social engineering, developer tool malware, compromised endpoints, and artificial intelligence over several months. Binance executive Richard Teng stated that the incident cannot be reduced to a single employee mistake. The exchange and the FBI have attributed the theft to North Korean hackers, though North Korea denies involvement. Partners helped freeze nearly $3 billion, while Binance used corporate funds and insurance to replenish the stolen assets.
Russian CA TCI Integrates ACME Protocol to Automate TLS Certificate Issuance
The Technical Center Internet (TCI), part of RTK-COD, has deployed a production ACME server compatible with standard clients such as acme.sh, Certbot and lego. The implementation aligns the ACME state machine with the existing isolated signing infrastructure, Domain Control Validation mechanisms and mandatory Certificate Transparency logging to Yandex and VK CT logs. Certificate lifetimes are shortening industry-wide, with Web PKI limits dropping to 47 days by 2029, making manual issuance unsustainable. The service supports HTTP-01 and DNS-01 challenges, ECDSA P-256 keys and certificate revocation, while preserving the requirement for Subject/CN in CSRs and mandatory revocation reasons. A separate staging environment uses an internal CT log simulator for safe testing. Future plans include full multi-SAN support, ARI (RFC 9773) and removal of the Subject/CN restriction.
Russia Pushes Corporate Multibanking Forward with Updated Open API Standards
The Bank of Russia and AFT have advanced Open Banking standards that enable corporate clients to aggregate account data across multiple banks within a single interface. The new specifications cover consent management, security profiles based on STO BR FAPI and OpenID Connect, and account information retrieval for both individuals and legal entities. While the 2025 pilot results demonstrated practical use cases such as personal financial assistants and corporate multibanking, the updated standards effective from October 2026 still lack a unified initiation-of-transfer component. Developers must therefore combine the new account-data APIs with separate bank-specific payment initiation mechanisms. The article explores how accounting systems or independent fintech services could become the primary workspace for financial directors managing payments, payroll, and liquidity across several banks. It also examines real-world challenges including idempotency handling, status reconciliation after network failures, and the separation of application permissions from signer authority. Examples from the UK Open Banking Limited sweeping VRP statistics illustrate how pre-authorized variable recurring payments can streamline operations while highlighting the additional policy work required for corporate supplier payments in Russia.
Hacker Attacks as Force Majeure: Russian and International Courts Diverge on Liability for Cyber Incidents
In November 2026, Russian hosting provider Beget suffered a major cyber attack that disrupted websites, virtual servers, email, DNS, and control panels for thousands of clients. Beget notified customers of circumstances resembling force majeure under Article 401 of the Russian Civil Code but stopped short of claiming automatic court recognition. Russian courts have reached inconsistent rulings on whether DDoS attacks and ransomware qualify as extraordinary and unavoidable events, examining factors such as attack scale, provider preparedness, and contractual obligations. International cases from France, Norway, the United States, and the Netherlands further illustrate that outcomes depend on evidence of prior security measures, backup integrity, and specific contractual language rather than the mere occurrence of an attack. Key precedents include disputes involving Timeweb, Expeditors, and Nordlo Haugesund where liability was limited or denied despite confirmed incidents. The analysis shows that even when force majeure is rejected, clients often struggle to recover full losses due to liability caps and proof requirements. Businesses are advised to maintain independent backups, review service agreements, and document incidents thoroughly to protect against financial exposure.
Taming the LLM Dragon: Corporate AI Gateway Architecture Addresses Classic Proxy Shortcomings
Spontaneous adoption of generative AI across enterprises has created shadow AI risks, prompt leaks, and uncontrolled token consumption that standard L7 proxies cannot mitigate. Traditional solutions built on Nginx, Envoy or Kong lack the ability to inspect Server-Sent Events streams, classify sensitive content inside prompts, or enforce token-based quotas in real time. The AI Optimum platform introduces a specialized AI gateway layer that sits between internal consumers and both local inference clusters and external APIs such as GigaChat and YandexGPT. It performs inline PII masking, routes traffic according to data sensitivity, supports OpenAI-compatible endpoints, and maintains detailed audit logs required under 152-FZ. The gateway adds only tens of milliseconds of latency while enabling granular billing, context caching optimization, and protection against runaway agent loops. Subsequent articles in the series will examine real corporate AI spend and further regulatory controls.
From Japanese sources
Translated from Japanese
Barracuda ESG Hit by High-Severity Vulnerabilities Allowing Chained Root Access
Barracuda Networks has released patches for multiple products after disclosing two high-severity vulnerabilities that affect the Email Security Gateway (ESG). CVE-2026-116606 is a pre-authentication authorization bypass in ESG that permits an attacker with network access to the management interface to import a malicious backup file and alter device configuration without credentials. CVE-2026-111560 is an OS command injection flaw in timezone configuration handling that requires administrator login but grants root-level command execution. The command injection issue also impacts Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall, and Web Security Gateway. The vendor published its advisory on November 2, 2026, and urges immediate application of the fixes to prevent potential full system compromise through chained exploitation.
WordPress 7.1.4 Addresses RCE in Update Process and Multiple Stored XSS Vulnerabilities
The WordPress development team released version 7.1.4 on October 28, 2026, as a security update to resolve several vulnerabilities. The most severe issue allows remote code execution during the software upgrade process. Multiple stored cross-site scripting flaws were also fixed, including those triggered by specially crafted block markup and manipulated privacy data deletion requests. No CVE identifiers were disclosed in the advisory. Site administrators are strongly urged to apply the update immediately to prevent potential exploitation. The announcement was reported by Security NEXT on November 2, 2026.
CISA Adds Two Ivanti Connect Secure Flaws to KEV Catalog After Confirmed Exploitation
US authorities have issued an alert after confirmed exploitation of two vulnerabilities in Ivanti Connect Secure (ICS). The flaws, tracked as CVE-2026-111357 and CVE-2026-118527, were added to CISA’s Known Exploited Vulnerabilities Catalog on October 30, 2026. Attacks combining three vulnerabilities have also been observed in the wild. CVE-2026-111357 allows local authenticated attackers to escalate privileges due to missing authentication in a critical function. CVE-2026-118527 enables remote upload of arbitrary files to disk through predictable identifiers, even though authentication is required. The addition of CVE-2026-111357 was briefly withdrawn before being reinstated, highlighting administrative confusion around the listing.
GitLab Critical Vulnerabilities Traced to Ruby Onigmo Regex Engine, Including Exploited CVE-2026-97229
GitLab has disclosed that four critical vulnerabilities, including the already-exploited CVE-2026-97229, originate from flaws in the Ruby programming language's Onigmo regular expression engine rather than in GitLab code itself. The most severe issue, CVE-2026-97229, is an integer overflow in regex processing within CI/CD configuration files and carries a maximum CVSSv3.1 base score of 10.0. GitLab released patches on October 8, 2026, covering versions 19.4.2, 19.3.5, and 19.2.8. Ruby's development team followed with its own advisory on October 23, 2026, addressing the same underlying defects. The remaining three vulnerabilities involve double-free memory errors and additional integer overflows during regex parsing and compilation. Because the root cause lies in a shared dependency, any application or environment relying on the affected Ruby Onigmo engine may also be exposed.
CISA Adds Cisco Secure Firewall and GitLab Flaws to Known Exploited Vulnerabilities Catalog
US authorities have warned that two vulnerabilities in Cisco Systems firewall products and the GitLab development platform are being actively exploited in the wild. The Cybersecurity and Infrastructure Security Agency added CVE-2026-76418 and CVE-2026-97229 to its Known Exploited Vulnerabilities catalog on October 29, 2026, urging immediate remediation. CVE-2026-76418 affects Cisco Secure Firewall ASA Software and Cisco Secure FTD Software, allowing unauthenticated attackers to trigger device reboots and cause denial-of-service conditions. CVE-2026-97229 is an integer overflow in GitLab stemming from insufficient validation of regular expressions in CI/CD configurations, enabling remote code execution without authentication. CISA noted that the GitLab issue originates from a dependency in Ruby/Onigmo and may impact other products beyond GitLab itself. Organizations are advised to apply patches or mitigations without delay to prevent further exploitation.
Cisco ASA and FTD Face DoS Vulnerability in SSL VPN Already Exploited in the Wild
Cisco Systems has disclosed a denial-of-service vulnerability affecting its Cisco Secure Firewall ASA and Cisco Secure Firewall FTD products. The flaw, tracked as CVE-2026-76418, resides in the SSL VPN remote access feature and carries a CVSS v3.1 base score of 8.6, rated High severity. Exploitation occurs when secondary authentication is configured on tunnel groups, allowing an attacker to send a crafted request that forces a device reboot without requiring authentication. Cisco confirmed active exploitation of the issue in October 2026. Security updates addressing the vulnerability are now available for both affected product lines. The advisory recommends immediate application of the patches to prevent service disruption.
From Portuguese sources
Translated from Portuguese
WordPress Patches Race Condition in Core Update Process Enabling Unauthenticated Remote Code Execution
WordPress addressed a critical race condition vulnerability in its core update mechanism on October 28, 2026, that could allow remote code execution without authentication. The flaw affects the automatic update process used by the majority of installations, exposing a temporary installer during file extraction to a predictable folder. Wordfence recorded 60,471 exploitation attempts within the first 24 hours after disclosure. The issue was discovered by researcher Umut Bayram and fixed across multiple branches including version 7.1.4, which bundles 22 security patches. Mitigations include immediate updates, restricting public access to the wp-content update directory, and ensuring application firewall coverage. Versions 4.6 and earlier receive no further security updates.
Cloudflare Blocks 18.2 Million DDoS Attacks in Q3 2026 Amid Shifting Attack Patterns
Cloudflare reported blocking 18.2 million network-layer DDoS attacks between July and September 2026, marking a 208% increase from the same period in 2025. The company recorded an average of roughly 8,200 attacks per hour, with 96% lasting under ten minutes and 98% staying below 1 Gbps. Large-scale attacks exceeding 1 Tbps dropped sharply from 805 in Q2 to 251 in Q3, a decline Cloudflare links to early 2026 law enforcement actions against four IoT botnets. Attack vectors shifted notably, with CLDAP reflection falling 99.5% while DNS amplification rose 215% and UDP floods grew 122%. The United States led targeted countries, followed by China and Indonesia, while media and publishing remained the most affected industry. Mirai variants accounted for 46.5% of network-layer bytes, with new families such as Dysphoria and Evooo1Bot emerging to replace dismantled botnets.
Binance Confirms Record $6.3 Billion Crypto Theft via Compromised Hot Wallet and EIP-7702
Binance reported on October 30, 2026 that attackers stole approximately 6.3 billion dollars in cryptocurrency, equivalent to roughly 34 billion reais, marking the largest theft in the sector. The unauthorized transfers occurred on October 29 and were completed in about 20 minutes after the attacker compromised the system authorizing withdrawals. According to TRM Labs, the intruder leveraged Ethereum's EIP-7702 feature to seize control of a hot wallet following at least 36 hours of preparation. Initial reports pointed to a compromised DevOps engineer's laptop as the entry point, but the exchange later stated the incident involved multiple factors and was not a single-click action. Roughly 3 billion dollars have been traced, with Tether freezing over 1.57 billion USDT and Circle blocking more than 800 million USDC. Binance has committed to covering all losses through its SAFU fund and internal capital while cooperating with the FBI and U.S. Secret Service. Attribution remains disputed, with TRM Labs and Chainalysis linking the operation to the TraderTraitor group connected to Lazarus, though Binance has not confirmed the perpetrators.
China-Linked WARP PANDA Exploits VMware ESX Zero-Day CVE-2026-41709 to Evade Logging
CrowdStrike reported on 28 October 2026 that the China-linked group WARP PANDA used CVE-2026-41709, a zero-day in VMware ESX, to operate without leaving records on compromised hypervisors. The vulnerability carries a low CVSS 3.1 score of 2.7 and was added the same day to the CISA Known Exploited Vulnerabilities catalog with a remediation deadline of 11 November. Broadcom describes the flaw as insufficient logging that allows a malicious administrator to execute certain operations without them appearing in logs. The issue does not enable remote code execution or privilege escalation on its own; its value lies in erasing the audit trail that incident responders rely on to reconstruct activity. CrowdStrike linked the exploitation to espionage operations against U.S. legal-sector organizations, with activity intensifying in early 2026. The report also highlights deployment of BRICKSTORM and SharpStorm malware in vCenter environments along with stolen cloud session tokens. Broadcom has released fixed builds for ESXi 9.1, 9.0.2 and 8.0 U3j, while VMware Cloud Foundation 5 requires version 5.2.4.
Telegram Voice Call Flaw Allows Remote Code Execution on Android Devices
Security researchers disclosed a vulnerability in Telegram for Android that enables remote code execution on a victim's device simply by answering a voice call. The attacker requires only a standard account, and the flaw was present in versions 8.6.2 through 12.10.3 released between March 2022 and September 2026. Telegram addressed the issue in version 12.10.4, released at the end of September 2026. The root cause lies in improper handling of the MediaState message exchanged during calls, specifically when processing rotation values and missing video state fields, leading to out-of-bounds memory reads. The same underlying fix was deployed earlier to shared call libraries, iOS, and desktop clients, but reached Android later. Researchers confirmed the impact only on private calls running on ARM64 Android devices, with no evidence of exploitation in the wild or public CVE assignment as of October 29, 2026.
PHP2Shell Campaign Chains PHP and Linux Kernel Flaws to Compromise 25 Servers Including US Government-Linked Network
Israeli security firm Dream disclosed a sophisticated campaign that achieved root access on 25 servers by chaining two remote code execution vulnerabilities in PHP2Shell with a Linux kernel flaw. The attackers targeted 24 perimeter firewalls from a single unnamed vendor plus one internal management server across the United States, Japan, Taiwan, and South Korea. Three of the compromised devices belonged to an environment connected to the US government, where the intrusion led to domain controller access and Active Directory enumeration. The attack chain began with CVE-2026-109618 and CVE-2026-109619, which granted initial web server access, and escalated via CVE-2026-46300 (Fragnesia) to obtain root privileges. Dream observed extensive reconnaissance using the Chinese search engine FOFA, with indicators pointing to Chinese-language tooling and timing, though no specific threat actor was attributed.
From Chinese sources
Translated from Chinese
No News Content Available
The provided news item contains no text or details in the original Chinese source. Without any substantive information, it is impossible to determine relevance to cybersecurity topics. The entry is therefore classified outside all security-related categories.
360 Security Cloud Opens PHP2Shell Vulnerability Self-Check Platform to Government and Enterprise Users
360 Security Cloud has launched a dedicated self-assessment platform that allows organizations to scan their PHP-based websites and systems for the PHP2Shell vulnerability. The service is now available to government agencies, large enterprises, and small-to-medium businesses. Users can apply by scanning a provided QR code to determine how many of their assets run PHP, identify affected versions, and check whether any systems have already been compromised. The platform addresses key questions about exposure: the number of PHP-powered sites and systems, the presence of vulnerable versions, and signs of prior intrusion. The announcement emphasizes that the tool helps organizations proactively assess risk without requiring external assistance. The original Chinese report was published on October 30, 2026, and the service is positioned as a practical response to ongoing PHP-related security concerns.
GEEKCON 2026 Returns to Shanghai: Hackers Demonstrate AI-Assisted Exploits Across Apps, Robots and Vehicles
GEEKCON 2026 brought the security conference back indoors to the CMG Media Cinema in Shanghai's West Bund after last year's open-air venue. Organizers introduced two new AI-focused tracks alongside the traditional DAF vulnerability exploitation challenge and 30+5 deep-dive sessions. In the AI Hacker Extreme Challenge, six teams used AI tools to compromise six real-world targets in a single afternoon, achieving eleven successful breaches. Demonstrations included remote hijacking of quadruped robots, silent app installation on Android devices, unauthorized vehicle control, and novel exploitation paths in fastjson 1.2.83 discovered with AI assistance. The AI Hacker Debate revealed audience division on whether human hackers will be replaced, while the human-only DAF track awarded no first or second prizes. Organizers framed the event as an effort to illuminate vulnerabilities before they appear in real-world attacks, echoing themes from The Matrix.
From Accessible to Controllable: Ruishu Information Launches AITM for AI Agent Lifecycle Security
As AI Agents become digital employees in enterprise R&D, office, and business workflows, organizations must now ensure they are manageable, controllable, and auditable. A multinational consulting firm’s internal AI platform was compromised by an autonomous agent attack that progressed from interface reconnaissance to vulnerability exploitation and database read-write access. Conventional scanners missed the injection points, but the agent inferred query structures from database error messages. Ruishu Information has responded with its Agent Intelligent Lifecycle Management system (AITM), which enforces security across admission, runtime, permissions, and data flows. The platform combines static scanning, behavioral analysis, semantic judgment, and sandbox execution for pre-deployment checks, followed by continuous runtime validation and LLM data-plane protection. AITM applies HMAC-SHA256 signatures, tool whitelists, PII tokenization, and four-stage Trace auditing to reduce blind spots throughout the agent lifecycle.
GitLab Discloses 12-Year-Old CVSS 10.0 Vulnerability Enabling Unauthenticated Remote Code Execution
GitLab has published a critical security advisory for CVE-2026-110264, a CVSS 10.0 flaw that permits unauthenticated remote code execution on both Community and Enterprise self-hosted instances. The vulnerability has existed in the codebase since 2014 and affects every version up to the latest release prior to the October 2026 patch. Exploitation requires no credentials or special conditions, allowing attackers to run arbitrary commands, exfiltrate source code, deploy backdoors, or move laterally. The issue remained undetected through multiple code iterations, security audits, and version updates due to its hidden trigger conditions within the large, complex application. Organizations are urged to immediately verify their version, review access logs for anomalies, and apply the official fix, while temporary mitigations include network restrictions and enhanced monitoring.
Google Brotli Decoder Vulnerability CVE-2026-111497 Enables Remote Code Execution in Node.js, Python, Bun and Envoy
A critical out-of-bounds write flaw in Google's Brotli decoder (CVE-2026-111497) affects multiple widely used platforms including Node.js, Python, Bun and Envoy. Imperva researchers demonstrated reliable remote code execution on official Node.js 24.22.0 builds for Linux arm64, naming the exploit Node2Shell. The vulnerability allows crafted Brotli-compressed data to corrupt memory, leading to crashes, information leaks or arbitrary code execution. Affected versions include Node.js releases below 22.23.4, 24.22.1 and 26.12.1, plus all versions of the Python brotli and brotlicffi packages. Patches have been issued for Node.js, while other projects await updates; no in-the-wild exploitation has been observed yet. The incident highlights recurring supply-chain risks where a single foundational library impacts thousands of downstream applications.
From Spanish sources
Translated from Spanish
Node.js Issues Security Releases for 26.x, 24.x and 22.x Fixing High-Severity TLS and Brotli Flaws
Node.js published security updates on October 21, 2026 for the 26.x, 24.x and 22.x release lines. The patches address multiple high-severity vulnerabilities affecting TLS hostname validation and the Brotli decoder, along with updates to critical dependencies including OpenSSL and Undici. Several CVEs cover bypasses in certificate hostname checks when IP addresses use full-width digits or when hosts resolve loosely to IP addresses. A particularly serious out-of-bounds write in the Brotli decoder (CVE-2026-111497) could enable remote code execution on services processing compressed responses. Additional fixes resolve keep-alive socket timing issues, DNS resolution truncation with NUL characters, and entropy caching problems in crypto.randomUUID and randomInt functions. The releases also update c-ares, Undici, OpenSSL, SQLite and ca-cert bundles following the eMudhra intermediate CA compromise.
Node.js Fixes High-Severity Brotli Decoder Flaw Leading to Remote Code Execution
A high-severity vulnerability in the bundled Brotli decoder of Node.js allows out-of-bounds writes when processing attacker-controlled compressed data, potentially resulting in remote code execution. The flaw, tracked as CVE-2026-111497, affects all supported branches including 22.x, 24.x, and 26.x prior to the October 21, 2026 security release. Patched versions 22.23.4, 24.22.1, and 26.12.1 address the memory corruption issue that arises during Brotli decompression in services accepting third-party content. The same update resolves additional high-severity problems, notably hostname validation weaknesses in TLS. Organizations using unsupported branches such as 18.x, 20.x, 23.x, and 25.x must migrate to maintained releases, while those linking against system Brotli libraries should verify inclusion of upstream commit 0ed4268. Security teams are advised to audit all environments, including containers and CI pipelines, that process Brotli-encoded data.
PHP Issues Emergency Patches for Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released urgent patches for two critical vulnerabilities collectively known as PHP2Shell that enable unauthenticated remote code execution on affected servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, score 9.2 on CVSS v4.0 and have already seen active exploitation attempts with malicious payloads adjusted to bypass WAF rules. The issues affect multiple PHP deployment methods including Apache with mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed, and do not require complex application code to be exploitable. CVE-2026-109618 involves a memory corruption chain leading to code execution under the web process privileges, while CVE-2026-109619 stems from an obsolete global state issue causing use-after-free conditions that can result in memory disclosure and code execution. Patched versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, with administrators advised to restart all persistent workers after updating. Temporary mitigations such as setting memory_limit to -1 and disabling session.upload_progress.enabled are available for environments that cannot patch immediately.
Cyberattack Exploits Exposed Danfoss Refrigeration Controllers Across French Supermarkets
A remote cyberattack targeted Danfoss AK-SM 8xxA Series controllers in French supermarkets, allowing attackers to manipulate refrigeration parameters and trigger defrost cycles that raised temperatures and spoiled food stock. The incident impacted an estimated 250 to 350 stores belonging to major chains including Intermarché, Carrefour Market, Leclerc, and others. Paris prosecutors have opened a large-scale investigation into the attack and associated damages, including potential fires. The root cause traces to outdated software on internet-exposed OT management interfaces, with multiple CVEs enabling authentication bypass and remote code execution. Thousands of similar Danfoss systems remain publicly accessible worldwide, highlighting persistent OT exposure risks. Immediate remediation steps include closing web consoles, enforcing VPN access, and applying updates to versions 4.2 and 4.3.1 or later.
Attackers Exploit Critical Atlassian Data Center Flaw CVE-2026-21589 Hours After PoC Release
Exploitation attempts against CVE-2026-21589 began almost immediately after technical details and a Nuclei template were published. The vulnerability allows unauthenticated arbitrary file read in multiple Atlassian Data Center products and carries a CVSS v4.0 score of 9.3. In environments integrated with Crowd, attackers who obtain crowd.properties can extract plaintext credentials and escalate to administrator privileges via the Crowd API. The flaw stems from improper handling of double-colon sequences in a shared web resource library, enabling path traversal against plugin resource endpoints. Affected products include Bitbucket Data Center, Confluence Data Center, Jira Software Data Center, Jira Service Management Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian urges immediate patching outside normal cycles and recommends WAF rules or Tomcat RewriteValve configurations to block traversal patterns. Organizations should also review access logs for double-decoded URLs containing .., /, \, or :: sequences.
LibreOffice and Apache OpenOffice Flaws Enable Remote Code Execution via Malicious Spreadsheets Without Macro Warnings
Two vulnerabilities, CVE-2026-63277 in LibreOffice Calc and CVE-2026-59265 in Apache OpenOffice, allow attackers to execute arbitrary code simply by tricking users into opening specially crafted spreadsheet files. The flaws exploit Java integration and class path handling, bypassing traditional macro security prompts entirely. LibreOffice has already released fixes in versions 26.2.5 and 26.8.0 that restrict class path entries to local file URLs only. Apache OpenOffice 4.1.16 and earlier remain vulnerable, with the stable patch expected in 4.1.17; interim mitigation requires disabling Java integration. The issues highlight risks in office suites that process untrusted documents containing external data connections or JDBC references. Organizations are advised to enforce least-privilege execution and avoid opening files from unknown sources until patches are applied.