https://pulse.adyog.com/insights/x47c-botnet-ai-credit-drain-grok-persistence WebPulse en 2026-09-27 x47.c botnet, advertised at $950, includes a mode that drains AI credits https://pulse.adyog.com/insights/storm-3168-azure-service-principal-deletions WebPulse en 2026-09-27 One Azure identity attempted 150+ deletion or key operations in 35 minutes https://pulse.adyog.com/insights/salesbleed-agentforce-zero-click-crm-exfiltration WebPulse en 2026-09-27 Salesforce Agentforce Flaws Could Have Exposed CRM Data via Lead Forms https://pulse.adyog.com/insights/openai-agents-link-chains-screenshot-service WebPulse en 2026-09-27 OpenAI agents chained 900+ links to run code via a screenshot service https://pulse.adyog.com/insights/openai-agent-dns-gap-sandbox-disclosure WebPulse en 2026-09-27 OpenAI's sandbox alarm fired in 12 minutes; the agent ran 2.5 more hours https://pulse.adyog.com/insights/openai-agent-australia-medicare-portal-bypass WebPulse en 2026-09-27 OpenAI Agent Bypassed Australian Medicare Statistics Portal Controls https://pulse.adyog.com/insights/nextjs-16-3-6-imageresponse-rce-patch WebPulse en 2026-09-27 Next.js 16.3.6 patches ImageResponse remote code execution flaw https://pulse.adyog.com/insights/meta-muse-ai-agent-zero-day-account-token WebPulse en 2026-09-27 Meta's Muse AI Agent Zero-Day Exposed Account Tokens to Any Local App https://pulse.adyog.com/insights/markey-bill-ai-agent-hack-investigation-board WebPulse en 2026-09-27 Markey bill would create federal board to investigate AI agent-led hacks https://pulse.adyog.com/insights/labcorp-44-state-settlement-vendor-oversight WebPulse en 2026-09-27 44 state AGs fine Labcorp $2.3M over a debt collector's 2019 breach https://pulse.adyog.com/insights/kiteworks-six-hour-precautionary-shutdown WebPulse en 2026-09-27 Kiteworks asks customers to shut down for six hours on law enforcement tip https://pulse.adyog.com/insights/grav-cve-2026-42608-clop-leak-site-backport WebPulse en 2026-09-27 Grav 1.7 lacked fix for CVE-2026-42608 when Clop's leak site was breached https://pulse.adyog.com/insights/google-tests-flipkart-buy-button-gemini-india WebPulse en 2026-09-27 Google tests in-chat Flipkart checkout inside Gemini and AI Mode in India https://pulse.adyog.com/insights/github-actions-reenabled-shai-hulud-payload WebPulse en 2026-09-27 Two Compromised GitHub Actions Were Re-Enabled With Malicious Tags Intact https://pulse.adyog.com/insights/elementor-4-3-csrf-admin-creation-link WebPulse en 2026-09-27 Elementor 4.3.0 and 4.3.1 flaw let one link create an administrator https://pulse.adyog.com/insights/cisa-kev-wso2-adobe-commerce-sharepoint WebPulse en 2026-09-27 CISA adds WSO2 and Adobe Commerce flaws to exploited-vulnerability list https://pulse.adyog.com/insights/bitget-backend-spoofed-data-351m-transfers WebPulse en 2026-09-27 Bitget Says Spoofed Backend Data Triggered Transfers It Now Puts Above $390M https://pulse.adyog.com/insights/ai-relay-servers-mask-frontier-model-access WebPulse en 2026-09-27 Team Cymru Counts 80,000+ Relays Masking Who Uses Frontier AI Models https://pulse.adyog.com/insights/ai-agent-isolation-9-percent-medicare-portal WebPulse en 2026-09-27 Enterprise isolation of high-risk AI agents fell from 30% to 9%, survey shows