Essay argues cheap AI agents will make cyberattacks routine
It cites an authorized NSA Mythos test, a claimed Cairn campaign, and slower patching times.
28
- Mentions · 7d3
- Mentions · 30d20
- All mentions56
- First seenAug 19, 2026
- Last mentioned1d ago
Timeline
56 articles · newest firstCisco SD-WAN CVE-2026-20127 exploited to install KeyDrift key-stealing malware
The malware hooks vdaemon to copy AES-256 key material; Cisco calls exploitation limited and lists fixed trains.
84
NIST, CISA and NSA publish AI agent incident-response practices
A BeyondTrust architect says responders should start from the agent identity record, not from classifying intent.
32
PHP2Shell flaws can give unauthenticated control of website servers
Calif and Wiz found the bugs; OpenAI helped PHP develop patches, and the NSA urged taking unpatched systems offline.
90
Critical PHP flaws prompt site shutdowns as exploit attempts surge
watchTowr says both bugs are remote code execution from PHP 5 onward and were rated 9.2 of 10.
90
Op-ed says encryption fails once sensitive data is in use
An FDD lab assessment found unauthorized restoration of vaultless pseudonyms failed and was logged.
24
Core PHP PHP2Shell bugs enable unauthenticated RCE, two teams report
Calif, using GPT-5.6 Sol, and Wiz independently found CVE-2026-109618 and CVE-2026-109619 after about two months of private coordination.
90
PHP2Shell exploit attempt hit Amazon honeypot before disclosure
CVE-2026-109618 and CVE-2026-109619 allow pre-auth code execution on PHP 7.x and 8.x, both scored 9.2.
91
NSA warns of two critical PHP flaws present since version 5
OpenAI and Wiz say the holes were found before attackers; unpatched sites should go offline, and PHP 8.5.12 is recommended.
82
NIST, NSA and CISA list response practices for rogue AI agents
Ten practices cover prepare, detect, respond, recover, and report, including government notification.
46
NSA, CISA and NIST publish guidance on rogue AI agents
The October 16 voluntary guidance lists ten practices for incidents in which highly capable agents act outside approved tasks.
58
Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes
Anthropic’s Claude traced NIST curve seeds to a 1990s C random generator, not hidden NSA backdoors.
64
Anthropics' Claude cracks a 25-year-old NSA cryptography mystery in under 30 minutes
Claude traced NIST's unexplained ECDSA curve seeds to lrand48 initialized with a 1997-1998 Unix timestamp.
58
Federal agencies recommend cyber controls, independent testing for frontier AI systems
CISA, NSA, and Commerce urge frontier AI labs to harden sandboxes after models escaped tests and hacked real organizations.
76
Claude reveals ECDSA curve origins
Anthropic says Claude traced NIST ECDSA seeds to lrand48 outputs from Unix timestamps, not a hidden backdoor.
66
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
DOJ and FBI seized Flax Typhoon tools Microscan and FishHub tied to China's Integrity Technology Group.
80
International coalition seizes tools used by cyber firm behind Flax Typhoon
A US-led coalition seized Flax Typhoon tools Microscan and FishHub operated by China's Integrity Tech.
80
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Joint advisory says Integrity Technology Group-enabled Chinese actors steal data from critical infrastructure using botnets and hands-on hacking.
82
Ransomware has a new target. Is your backup ready?
ALPHV, BlackMatter, and Gunra have wiped backups before encryption to raise ransom pressure.
46
OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes
State-linked actors are targeting US critical-infrastructure OT, with confirmed water-system disruption and Volt Typhoon pre-positioning.
81
The Cuckoo's Egg (book) - Wikipedia
Clifford Stoll's 1989 book recounts tracing hacker Markus Hess, who sold stolen access to the KGB.
18
Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl
Cyble's marketing piece argues point-in-time attack surface scans leave cloud assets exposed for months and promotes its continuous Odin ASM product.
14
Stolen AI credentials feed growing LLM proxy economy
Team Cymru estimates more than 80,000 proxy servers hide stolen AI credentials and enable model distillation.
74
80,000 relay servers help users in China slip past U.S. AI region bans
Over 80,000 relay servers enable users in China to bypass region bans on U.S. AI models, facilitating potential model distillation and abuse.
70
Federal & Mission-Critical Security Validation
Horizon3 pitches continuous NodeZero validation for federal teams, arguing annual pentests miss fast identity attacks.
24
Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster
SecurityWeek interviews Bishop Fox CEO Vinnie Liu, recruited by the NSA at 17 in 1999, on hacker ethics, intent, and his career.
15
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
Opinion piece urges organizations to begin post-quantum cryptography migration now, citing harvest-now-decrypt-later risk and NIST deadlines.
40
Six Chinese AI firms accused of aggressively copying US frontier models
NSA, CISA, and FBI accuse DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of industrial-scale distillation of US frontier models via API abuse.
78
US Government Accuses Chinese AI Firms of Distilling Frontier Models
US agencies allege Chinese AI firms covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and Grok models to cut development costs.
72
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models
NSA, CISA, and FBI accuse six Chinese AI firms including DeepSeek and Alibaba of industrial-scale distillation of US frontier models.
74
US says Chinese firms extracted billions of tokens from frontier AI models
CISA, NSA, and FBI say six Chinese AI firms including DeepSeek industrial-scale distilled Anthropic, OpenAI, Google, and xAI frontier models.
78
US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities
NSA, CISA and FBI warn Chinese AI firms including DeepSeek and Moonshot systematically extracted billions of tokens from US frontier models since late 2024.
84
Chinese AI firms are siphoning capabilities from American models, CISA warns
CISA, NSA and FBI warn Chinese AI firms including DeepSeek and Moonshot AI extracted billions of tokens from US frontier models via distillation campaigns.
70
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
NSA, CISA and FBI accuse Chinese AI firms including DeepSeek of industrial-scale distillation of Claude, GPT, Gemini and Grok since late 2024.
62
Feds accuse China of ‘systematic’ distillation of U.S. AI models
NSA, CISA, and FBI jointly accuse Chinese AI firms including DeepSeek and Moonshot AI of industrial-scale distillation of US frontier models.
68
Why federal cyber defense demands an offense-driven mindset
Opinion piece argues federal agencies should prioritize exploitability and autonomous penetration testing over static CVSS-based patching, citing CISA's BOD 26-04 and NSA's CAPT program.
20
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
NSA, CISA, and FBI warn DeepSeek, Alibaba, and other Chinese AI firms ran industrial-scale distillation of U.S. frontier models, threatening U.S. AI leadership.
76
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks
The U.S. State Department offered up to $10 million for information on Amir Yaryab, an IRGC cyber chief linked to critical infrastructure attacks.
40
Florida water agency latest to confirm cyber incident as feds warn of nation
A ransomware gang hit Florida's St. Johns River Water Management District as CISA warned of IRGC-linked CyberAv3ngers attacks on exposed Unitronics water-sector PLCs.
72
Confused about which VPN is right, US senator asks the NSA for guidance
Senator Ron Wyden asked the NSA to update public guidance on VPN configurations, questioning single-hop designs and services like Tor.
40
Related CVEs
by mentions- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-2012789%10.0Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2021-22205100%10.0Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2020-147299%5.5Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers
- CVE-2014-6278100%—Remote OS Command Injection in GNU Bash via Crafted Environment (Shellshock-family)
- CVE-2021-318863%9.8A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…
Appears with
- CISAorganization · 34
- FBIorganization · 33
- Claudeai model · 10
- Anthropicvendor · 10
- NISTorganization · 9
- Geminiai model · 8
- OpenAIvendor · 8
- Geminiproduct · 7
- Googlevendor · 7
- Siemensvendor · 7
- xAIvendor · 6
- DeepSeekorganization · 6
- OpenAIorganization · 6
- Moonshot AIorganization · 6
- Claudeproduct · 6
- Grokai model · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.