https://pulse.adyog.com/briefs/citrix-and-kiteworks-took-different-paths-on-zero-day-warnin WebPulse en 2026-10-03T18:53:28+00:00 Citrix and Kiteworks took different paths on zero-day warnings https://pulse.adyog.com/insights/openai-devday-2026-agents-act-while-away WebPulse en 2026-10-03T17:37:20+00:00 OpenAI's DevDay moves AI from answering to acting while staff are away https://pulse.adyog.com/briefs/us-judge-dismisses-el-faro-journalists-pegasus-spyware-lawsu WebPulse en 2026-10-03T17:36:23+00:00 US judge dismisses El Faro journalists' Pegasus spyware lawsuit against NSO Group https://pulse.adyog.com/briefs/us-sanctions-10-targets-in-tren-de-aragua-atm-malware-scheme WebPulse en 2026-10-03T17:35:20+00:00 US sanctions 10 targets in Tren de Aragua ATM malware scheme https://pulse.adyog.com/briefs/montenegro-sends-alleged-iran-linked-hacker-to-us-in-a-rare WebPulse en 2026-10-03T17:33:25+00:00 Montenegro sends alleged Iran-linked hacker to US in a rare extradition https://pulse.adyog.com/briefs/researcher-reports-15-flaws-in-internxt-s-encrypted-cloud-st WebPulse en 2026-10-03T17:28:02+00:00 Researcher reports 15 flaws in Internxt's encrypted cloud storage https://pulse.adyog.com/briefs/synacktiv-finds-unauthenticated-code-execution-flaw-in-argo WebPulse en 2026-10-03T17:24:42+00:00 Synacktiv finds unauthenticated code execution flaw in Argo CD https://pulse.adyog.com/insights/n8n-mongodb-chat-memory-nosql-injection WebPulse en 2026-10-03T16:47:10+00:00 n8n flaw could let outsiders read other users' AI chat histories https://pulse.adyog.com/insights/ghost-cve-2026-103266-stripe-checkout-newsletters WebPulse en 2026-10-03T16:45:39+00:00 Ghost bug lets unauthenticated attackers alter members and newsletters https://pulse.adyog.com/briefs/mi5-warns-100-uk-linked-academics-aided-china-funded-spy-res WebPulse en 2026-10-03T16:42:51+00:00 MI5 warns 100+ UK-linked academics aided China-funded spy research https://pulse.adyog.com/briefs/supabase-to-buy-turso-maker-of-a-rust-rebuild-of-sqlite WebPulse en 2026-10-03T16:41:12+00:00 Supabase to buy Turso, maker of a Rust rebuild of SQLite https://pulse.adyog.com/briefs/federal-judge-rules-a-flock-license-plate-search-was-unconst WebPulse en 2026-10-03T16:40:35+00:00 Federal judge rules a Flock license plate search was unconstitutional https://pulse.adyog.com/insights/litellm-jwt-email-fallback-account-takeover WebPulse en 2026-10-03T16:05:58+00:00 OX Security: LiteLLM email-claim flaw allows admin takeover, unfixed in 1.100.1 https://pulse.adyog.com/insights/dtu-breach-identity-system-records-to-2003 WebPulse en 2026-10-03T16:00:47+00:00 DTU's login system kept records back to 2003, and hackers downloaded data https://pulse.adyog.com/insights/aws-sovereign-cloud-independence-exercise WebPulse en 2026-10-03T15:55:55+00:00 AWS will unplug its EU sovereign cloud from its global backbone for a test https://pulse.adyog.com/briefs/openai-model-broke-a-tool-rule-and-used-two-flaws-to-reach-a WebPulse en 2026-10-03T15:52:41+00:00 OpenAI model broke a tool rule and used two flaws to reach an internal machine https://pulse.adyog.com/briefs/on-endor-labs-test-gpt-6-1-sol-and-astra-both-fail-most-secu WebPulse en 2026-10-03T15:48:54+00:00 On Endor Labs' test, GPT-6.1 Sol and Astra both fail most security checks https://pulse.adyog.com/briefs/attackers-downloaded-data-from-dtu-s-login-system-scope-uncl WebPulse en 2026-10-03T15:43:38+00:00 Attackers downloaded data from DTU's login system; scope unclear https://pulse.adyog.com/insights/openclaw-synology-chat-dns-rebinding-ssrf WebPulse en 2026-10-03T14:49:03+00:00 In some setups, an OpenClaw flaw lets attackers use a Synology NAS to fetch private data https://pulse.adyog.com/briefs/cisco-talos-tracks-china-nexus-group-that-targeted-asian-gov WebPulse en 2026-10-03T14:48:22+00:00 Cisco Talos tracks China-nexus group that targeted Asian governments https://pulse.adyog.com/briefs/github-retires-selected-ai-models-across-all-of-copilot WebPulse en 2026-10-03T14:45:55+00:00 GitHub retires selected AI models across all of Copilot https://pulse.adyog.com/briefs/microsoft-says-ai-cut-some-attack-steps-from-days-to-minutes WebPulse en 2026-10-03T14:43:21+00:00 Microsoft says AI cut some attack steps from days to minutes https://pulse.adyog.com/briefs/police-take-down-killsec-ransomware-sites-16-year-old-suspec WebPulse en 2026-10-03T14:41:08+00:00 Police take down KillSec ransomware sites; 16-year-old suspect arrested https://pulse.adyog.com/briefs/trigger-dev-self-hosted-setups-with-default-secrets-can-be-t WebPulse en 2026-10-03T13:32:09+00:00 Trigger.dev self-hosted setups with default secrets can be taken over https://pulse.adyog.com/briefs/microsoft-s-x-account-hacked-to-push-a-clippy-crypto-token WebPulse en 2026-10-03T13:30:15+00:00 Microsoft's X account hacked to push a Clippy crypto token https://pulse.adyog.com/briefs/researchers-show-attack-on-sconnect-login-tool-used-for-swif WebPulse en 2026-10-03T13:29:18+00:00 Researchers show attack on SConnect login tool used for SWIFT https://pulse.adyog.com/briefs/frontline-education-notice-says-school-staff-data-was-expose WebPulse en 2026-10-03T13:25:56+00:00 Frontline Education notice says school staff data was exposed in breach https://pulse.adyog.com/briefs/white-house-order-tells-agencies-to-use-super-intelligence-i WebPulse en 2026-10-03T13:22:05+00:00 White House order tells agencies to use 'Super Intelligence' instead of 'AI' https://pulse.adyog.com/briefs/warlock-ransomware-group-hits-water-and-telecom-firms-throug WebPulse en 2026-10-03T13:19:55+00:00 Warlock ransomware group hits water and telecom firms through SharePoint https://pulse.adyog.com/insights/fortra-boks-privileged-access-flaws WebPulse en 2026-10-03T11:40:22+00:00 Fortra patches BoKS flaws in the tool that guards Linux admin access https://pulse.adyog.com/insights/ai-agents-cannot-judge-own-3d-work WebPulse en 2026-10-03T10:41:11+00:00 GPT coding agents could not tell if their 3D geometry improved, a test finds https://pulse.adyog.com/insights/armatura-one-activemq-cisa-icsa-26-274-01 WebPulse en 2026-10-03T09:41:37+00:00 Armatura One embeds a known-exploited ActiveMQ flaw, CISA advisory says https://pulse.adyog.com/insights/abb-pcm600-scheduler-privilege-escalation WebPulse en 2026-10-03T09:40:17+00:00 ABB PCM600 flaw lets a logged-in user take control of the host https://pulse.adyog.com/insights/claude-code-mods-approve-tool-calls WebPulse en 2026-10-03T07:41:33+00:00 Claude Code mods can approve tool calls before the user is asked https://pulse.adyog.com/briefs/apple-says-it-will-add-controls-to-full-disk-access-on-mac WebPulse en 2026-10-03T07:37:51+00:00 Apple says it will add controls to Full Disk Access on Mac https://pulse.adyog.com/insights/insurers-pace-ai-agents-independent-testing WebPulse en 2026-10-03T02:50:23+00:00 Insurers Can Pace AI Agents Only If Independent Testers Go First https://pulse.adyog.com/insights/glassworm-linked-vscode-themes-hidden-loaders WebPulse en 2026-10-03T02:49:09+00:00 Color themes for VS Code are tied to a malware campaign, Socket finds https://pulse.adyog.com/insights/databases-second-contract-probably-right WebPulse en 2026-10-03T02:47:35+00:00 AI Gives Databases a Second Contract. Old Code Was Written for the First https://pulse.adyog.com/insights/bytecorestack-mcp-plugin-privilege-escalation WebPulse en 2026-10-03T02:44:48+00:00 WordPress AI connector plugin flaw lets a basic user become administrator https://pulse.adyog.com/insights/agent-authority-below-the-model WebPulse en 2026-10-03T02:43:39+00:00 AI Agents Need Controls They Cannot Grant Themselves or Be Talked Past https://pulse.adyog.com/insights/vibe-trading-file-read-tools-expose-secrets WebPulse en 2026-10-03T01:44:04+00:00 Vibe-Trading's file-reading AI tools expose server credentials, advisory finds https://pulse.adyog.com/insights/sift-self-improving-agents-testing-cost WebPulse en 2026-10-03T00:42:17+00:00 Self-improving AI agents are held back by the cost of testing them https://pulse.adyog.com/insights/vibe-trading-no-login-root-shell-agent WebPulse en 2026-10-02T23:43:11+00:00 Vibe-Trading's default setup lets strangers run root commands in its container https://pulse.adyog.com/insights/a2ui-web-core-openurl-javascript-uri WebPulse en 2026-10-02T23:40:16+00:00 An AI agent's button could run attacker code in apps using an A2UI library https://pulse.adyog.com/insights/github-app-token-length-40-to-520 WebPulse en 2026-10-02T22:39:47+00:00 GitHub App installation tokens grow from 40 to about 520 characters https://pulse.adyog.com/insights/sandbox-types-what-each-isolates-agents WebPulse en 2026-10-02T20:43:58+00:00 'Sandboxed' tells you little until you ask what the sandbox leaves shared https://pulse.adyog.com/insights/hca-timpani-ai-nurse-scheduling-oversight WebPulse en 2026-10-02T20:42:28+00:00 Some HCA nurses say AI scheduling strains care; HCA says managers decide https://pulse.adyog.com/insights/gpt-6-1-sol-codex-secure-code-endor-labs WebPulse en 2026-10-02T19:43:37+00:00 Cheaper AI coding model nearly matches pricier GPT-6 Astra on secure code https://pulse.adyog.com/insights/cloudflare-ohttp-gateway-closed-beta WebPulse en 2026-10-02T19:42:20+00:00 Cloudflare's OHTTP gateway beta lets apps take requests without seeing user IPs https://pulse.adyog.com/insights/cloudflare-clef-decision-model-human-threshold WebPulse en 2026-10-02T18:41:49+00:00 Cloudflare's Clef AI model makes the human-review threshold a business choice https://pulse.adyog.com/insights/uboot-splash-image-secure-boot-bypass WebPulse en 2026-10-02T17:46:14+00:00 Researchers say a U-Boot logo bug can bypass secure boot if storage is writable https://pulse.adyog.com/insights/dell-csm-six-flaws-kubernetes-storage-admin WebPulse en 2026-10-02T17:43:02+00:00 Dell storage flaws expose storage controls and, in some cases, Kubernetes nodes https://pulse.adyog.com/insights/gitlab-ai-gateway-cve-2026-90970-sandbox-escape WebPulse en 2026-10-02T16:42:05+00:00 GitLab flaw lets a signed-in AI user run commands on self-hosted gateways https://pulse.adyog.com/insights/johnson-controls-easyio-neo-cve-2026-64892 WebPulse en 2026-10-02T15:45:22+00:00 Johnson Controls patches a data-exposure flaw in building controllers https://pulse.adyog.com/insights/ai-engines-recommend-one-app-stack WebPulse en 2026-10-02T15:42:44+00:00 In one test, AI engines named the same four-product app stack in 68% of answers https://pulse.adyog.com/insights/bpfdoor-averat-smtp-telecom-disguise WebPulse en 2026-10-02T13:42:20+00:00 Rapid7: Telecom malware hides by imitating what the device is built to do https://pulse.adyog.com/insights/azure-api-connections-five-cross-tenant-flaws WebPulse en 2026-10-02T12:51:26+00:00 Researcher: five Azure Logic Apps flaws gave access to other tenants' data https://pulse.adyog.com/insights/sequencehash-multihashing-trail-of-bits WebPulse en 2026-10-02T11:39:39+00:00 Trail of Bits publishes a specification to keep hashed inputs distinct https://pulse.adyog.com/insights/chatgpt-mac-app-flaw-trusted-helper WebPulse en 2026-10-02T10:40:34+00:00 ChatGPT's Mac app had a flaw that could expose chats and browser sessions https://pulse.adyog.com/insights/meari-iot-cloud-openapi-missing-authorization WebPulse en 2026-10-02T09:56:30+00:00 Meari cloud flaws let any logged-in user reach other people's devices https://pulse.adyog.com/insights/chatbot-reasoning-story-told-after-the-answer WebPulse en 2026-10-02T09:55:10+00:00 AlphaGo veteran says chatbot reasoning is often a story told after the answer https://pulse.adyog.com/insights/ai-agent-own-logs-not-evidence-runtime WebPulse en 2026-10-02T09:51:16+00:00 Don't trust an AI agent's own account of what it did, Sysdig says https://pulse.adyog.com/insights/nber-ai-software-productivity-32-6-forecast WebPulse en 2026-10-02T08:39:47+00:00 A 32.6% AI coding gain is a market forecast, not a measured result https://pulse.adyog.com/insights/android-17-accessibility-advanced-protection WebPulse en 2026-10-02T08:39:40+00:00 Android 17 limits a feature fraud apps abuse, but only if users opt in https://pulse.adyog.com/insights/windows-11-26h2-settings-backup-default-on WebPulse en 2026-10-02T07:46:01+00:00 Windows 11 26H2 switches on settings backup for eligible work PCs by default https://pulse.adyog.com/insights/shopify-canvas-ai-edits-real-store-code WebPulse en 2026-10-02T06:51:15+00:00 Shopify's new AI tool edits the real code behind a store from a chat https://pulse.adyog.com/insights/pinkary-laravel-cloud-migration-hidden-shortcuts WebPulse en 2026-10-02T06:49:37+00:00 Moving Pinkary to Laravel Cloud exposed shortcuts its old setup had hidden https://pulse.adyog.com/insights/github-structured-vulnerability-report-forms WebPulse en 2026-10-02T06:43:22+00:00 GitHub's default security-report form now asks reporters for a proof of concept https://pulse.adyog.com/insights/pwc-survey-ai-attacks-readiness-gap WebPulse en 2026-10-02T05:50:53+00:00 Half of security and tech executives rank attacks on AI a top readiness gap https://pulse.adyog.com/insights/gemini-4-argon-vetted-defenders-first WebPulse en 2026-10-02T05:47:39+00:00 Google plans to lift cyber limits on Gemini 4 Argon first for trusted defenders https://pulse.adyog.com/insights/android-17-intrusion-logging-spyware-evidence WebPulse en 2026-10-02T05:43:49+00:00 Android 17's opt-in Intrusion Logging keeps phone attack evidence in the cloud https://pulse.adyog.com/insights/synacktiv-on-premise-llm-server-isolation WebPulse en 2026-10-02T04:51:19+00:00 Running AI in-house only protects data if the server is locked down https://pulse.adyog.com/insights/parks-rec-platform-webshell-upload-attack WebPulse en 2026-10-02T04:50:16+00:00 An attacker broke into recreation management software via sign-up and upload https://pulse.adyog.com/insights/linux-privilege-exploits-hardening-buys-time WebPulse en 2026-10-02T04:49:00+00:00 Synacktiv says Linux hardening can blunt most recent privilege exploits https://pulse.adyog.com/insights/gpt6-sol-codex-cheaper-security-gap WebPulse en 2026-10-02T04:48:08+00:00 GPT-6 Sol cost 78% less than Astra in Endor test; 25.1% passed security https://pulse.adyog.com/insights/cloudflare-clef-decision-models-odds-not-prose WebPulse en 2026-10-02T04:48:02+00:00 Cloudflare releases small AI models that return labels with odds, not prose https://pulse.adyog.com/insights/ai-pen-testing-harness-matters-more-than-model WebPulse en 2026-10-02T04:47:09+00:00 Ridge says the system around an AI pen tester matters more than the model https://pulse.adyog.com/insights/ai-agents-keep-access-after-task-delinea WebPulse en 2026-10-02T04:46:07+00:00 Delinea survey: 42% of leaders cannot end AI agent access automatically https://pulse.adyog.com/insights/wordpress-htaccess-plugin-flaws-nginx WebPulse en 2026-10-02T04:05:23+00:00 Two WordPress backup plugins could expose data on servers that ignore .htaccess https://pulse.adyog.com/insights/wikiskill-agents-remember-failed-fixes WebPulse en 2026-10-02T04:02:01+00:00 Google's WikiSkill lets AI agents remember failed fixes instead of repeating them https://pulse.adyog.com/insights/sveltekit-3-upgrade-cost-and-safer-defaults WebPulse en 2026-10-02T04:00:56+00:00 SvelteKit 3 forces new Node, Vite and TypeScript versions and tightens defaults https://pulse.adyog.com/insights/openai-gpt-6-1-astra-shelved-open-doors WebPulse en 2026-10-02T03:47:36+00:00 OpenAI reportedly shelved Astra; one expert sees open doors in a separate case https://pulse.adyog.com/insights/sandbox-never-the-boundary-agent-reach WebPulse en 2026-10-02T03:44:09+00:00 The Sandbox Was Never the Boundary. What the Agent Can Reach Is https://pulse.adyog.com/insights/human-in-the-loop-liability-transfer WebPulse en 2026-10-02T03:40:40+00:00 Human in the Loop Fails When Reviewers Can't Catch Rare Errors https://pulse.adyog.com/insights/apache-ossie-shared-metric-definitions WebPulse en 2026-10-02T02:39:57+00:00 Microsoft and Google back a shared format for business metric definitions https://pulse.adyog.com/insights/openai-agent-dns-sandbox-gap WebPulse en 2026-10-02T02:02:12+00:00 An OpenAI agent used DNS to reach a chatbot past its sandbox's network block https://pulse.adyog.com/insights/fortimail-cve-2026-104286-zero-day WebPulse en 2026-10-02T02:00:59+00:00 Unpatched FortiMail flaw is under attack; fixes for three branches are pending https://pulse.adyog.com/insights/china-linked-ai-policy-phishing-antino-backdoor WebPulse en 2026-10-02T01:59:49+00:00 Proofpoint says a Chinese group used fake AI policy invites to get replies https://pulse.adyog.com/insights/amazon-strands-decider-2b-agent-checks WebPulse en 2026-10-02T01:57:00+00:00 AWS says its decision model takes around 115 ms on widely available hardware