Attacker spoofed OpenAI and other AI bots to scan for secrets
One actor reached 48% of Cequence-protected organizations that saw AI bot traffic on one October day; nearly all requests failed.
58
Organization
Perplexity
- Mentions · 7d5
- Mentions · 30d22
- All mentions32
- First seenSep 6, 2026
- Last mentioned1d ago
Timeline
32 articles · newest firstAttacker impersonates 32 AI bots while scanning for credentials
CQ Prime says the scanner has run since late September, reached many Cequence customers in one day, and almost all requests failed.
58
CISA confirms active exploitation of two PHP2Shell RCE flaws
Both flaws score CVSS 9.2; fixes shipped October 21, and US agencies must patch by October 29.
90
PHP2Shell exploitation confirmed with working shells on honeypots
Karimi logged 35 shells on October 24 across three PHP 8.4.26 honeypots; CISA had not added the flaws to KEV.
84
PHP2Shell RCE flaws confirmed exploited against PHP 8.4.26
A Perplexity honeypot saw working RCE and an 800 KiB cookie dump on Apache mod_php; a separate unpatched RCE still needs a config workaround.
88
Perplexity and NVIDIA researchers introduce JOLT learning method
The available page is a cookie notice, so the method's results and release status are not shown.
28
Walmart will let shoppers’ AI agents buy with limits
Next month, Agent Profiles on Walmart and Sam’s Club default to approving every purchase and connect agents through an MCP Agent Gateway.
58
Exa 3.0 Search API claimed ahead on eight benchmarks
The captured page is a cookie notice, so scores against Perplexity, Brave, and Parallel are not shown.
22
Websites block consumer AI agents as agentic traffic rises
Meta's Muse was downloaded 5 million times in its first month, and agentic web traffic tripled from August to September.
32
Perplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents
Perplexity open-sourced SPACE, a Firecracker microVM sandbox for isolating AI agents.
55
Continuous accountability for Verified bots
Cloudflare will score Verified bots on whether they honor robots.txt and rate-limit signals over time.
34
The next election influence campaign will target your AI chatbot
VisionHeight says hyperlocal site networks are seeding content to steer AI chatbot answers on U.S. races.
66
Nvidia's Nemotron 3.5 Super VL is an open model built to run enterprise AI agents nonstop
Nvidia released open Nemotron 3.5 Super VL, a 120B multimodal model for always-on enterprise agents.
74
Open From Data Center to Desktop: NVIDIA Expands Nemotron Family With Highest Efficiency Super VL and Bolt Models
NVIDIA released open Nemotron 3.5 Super VL, a 120B agent model, plus Bolt edge models.
76
How Windows is being optimized for Nvidia’s RTX Spark laptops
Microsoft tuned Windows on Arm for Nvidia RTX Spark laptops, including local AI agents and Prism emulation.
46
Floqer’s AI agents research sales prospects so teams don’t have to
Floqer says its sales-research agents reached $1.2 million ARR and will be open-sourced.
32
All Systems Go: Global PC App Ecosystem Ready for NVIDIA RTX Spark
NVIDIA prepares RTX Spark PCs for an Oct. 16 launch with local AI agents and Nemotron 3.5 Bolt 74B.
74
AI could upend food delivery
DoorDash warned Bay Area restaurants that AI startup Bites listed them without consent while taking orders through ChatGPT.
38
Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
Attackers use fake ChatGPT, Claude, and Gemini ad sites to steal passwords and MFA codes.
71
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
A phishing platform spoofs AI ad portals for ChatGPT, Gemini, and Claude to steal credentials and MFA codes.
67
[AINews] not much happened today
OpenAI’s GPT-6.1 Sol undercuts Astra on price while Sonnet 5.5 ranks high on Agent Arena.
80
Perplexity Releases pplx-embed-v2-context-9b-preview: A Contextual Embedding Model That Retrieves Answers and Their Supporting Evidence
Perplexity releases pplx-embed-v2-context-9b-preview, a 9B contextual embedding model for RAG.
55
Perplexity Introduces Photon: A Rust-Based Retrieval Engine That Cuts p99 Latency From 800 ms to 65 ms
Perplexity's Rust engine Photon cuts retrieval p99 latency from about 800 ms to 65 ms.
54
[AINews] Opus 5.5 is good at explainer videos
Claude Opus 5.5 leads SimpleBench at 88.4% as GPT-6, Gemini 3.8 Flash, and MiMo-V2.6-Pro also ship.
80
Exa Launches Agent Ultra: A Subagent Swarm Deep Research API Built for Exhaustive List Building
Exa launched Agent Ultra, a hosted subagent research API it says leads four deep-research benchmarks.
46
Perplexity Trains Its Computer Agent on Real Mistakes With Hint-Guided Self-Distillation
Perplexity reports a 21.2% live drop in Computer agent tool failures after hint-guided self-distillation.
54
Amazon blocks Meta's AI agent Muse from online shopping
Amazon blocks Meta's Muse AI agent from its platform over security concerns and unauthorized data handling.
55
Amazon doesn’t trust Meta’s Muse AI agent
Amazon blocked Meta's Muse AI shopping agent, citing unauthorized access and privacy concerns over the agent failing to identify itself and capturing credentials.
50
BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
68
Perplexity trusts GPT-6 Astra with end-to-end systems
Perplexity uses OpenAI's GPT-6 Astra to craft communications, edit production systems, and generate end-to-end automated tests for its search engine.
38
Muse can shop, write emails, and negotiate prices for users, all through WhatsApp
Meta launched Muse, a WhatsApp-controlled agent running on an isolated VM with a Sentinel gatekeeper, able to shop, email, book travel, and negotiate.
72
Perplexity Details Its GPU Embedding Stack: How Ivy, Tulip and ROSE Serve pplx-embed
Perplexity details its GPU embedding serving stack (Ivy, Tulip, ROSE), which reuses LLM prefill/decode kernels, CUDA graphs, and LazyTensors to cut launch overhead.
33
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-06287%8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
- CVE-2026-55945<1%4.2Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
Appears with
- OpenAIorganization · 10
- Metaorganization · 9
- Anthropicorganization · 8
- Perplexityvendor · 7
- Googleorganization · 7
- OpenAIvendor · 6
- Metavendor · 6
- GPT-6 Astraai model · 5
- Nvidiavendor · 5
- Googlevendor · 5
- Museai model · 5
- Anthropicvendor · 5
- Amazonorganization · 4
- Museproduct · 4
- Nvidiaorganization · 3
- Cloudflareorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.