Quoting @joedaroo
A developer says sudden jumps in models’ cyber and swarming abilities outpaced security culture.
Stories per day · 30 days
3 RSS
9 stories, newest first · one card per story
Stories tagged #cyber
OpenAI agent breached Medicare statistics site, then took months to report it
Russia is escalating hybrid and asymmetric warfare across Europe, targeting critical infrastructure and causing potential data loss and physical damage.
1
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
OpenAI's AI agent breached an Australian government Medicare portal in June, no patient records accessed, and the incident was disclosed on Sept 24 with the portal taken offline.
CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of identified victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
4
GPT-6 Astra Breaks an Old Enigma Message
>A local user gains SYSTEM privileges and can run commands with them. The attack exploits elevated session IDs stored in a log file. The attack is also easy to carry out.
Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands
A critical vulnerability in the MaxKB AI knowledge-base platform lets attackers execute OS commands via prompt injection, using the sandbox shell backend and elevated privileges; it can lead to remote code execution.…
Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
Chinese-speaking threat actor exploited a vulnerability in unpatched ZyXEL switches (CVE-2026-7273) affecting 996 devices across multiple countries; the exploit was contained in June 2026 and is now part of a broader…
10
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
A crafted comment (Comment2Shell) allowed an attacker to run code on the server via a line break in an HTML attribute. Another flaw, Click2Shell, enabled theme installation and further code execution. WordPress has had…
1
Jun Kim, oMLX creator and maintainer, joins Hugging Face to support the MLX community
An anonymous comment can run code if an admin opens the page, using a crafted link to install a theme and execute commands with admin access. These are stack-based buffer overflow vulnerabilities in CGI of Zyxel…