https://pulse.adyog.com/insights/atns-ransomware-malware-air-traffic-ot-network WebPulse en 2026-09-30T14:15:41+00:00 South Africa's air traffic provider found ransomware-linked malware https://pulse.adyog.com/insights/openssl-14-fixes-small-inputs-large-resource-use WebPulse en 2026-09-30T13:15:27+00:00 Several of OpenSSL's 14 fixes let a peer force outsized memory or CPU use https://pulse.adyog.com/insights/ipsec-quantum-downgrade-cloudflare WebPulse en 2026-09-30T13:12:14+00:00 Cloudflare: IPsec flaw could let a future quantum attacker sidestep upgrades https://pulse.adyog.com/insights/owasp-noir-endpoint-inventory-shadow-apis WebPulse en 2026-09-30T12:13:28+00:00 Free OWASP tool lists routes in code, including undocumented ones https://pulse.adyog.com/insights/china-model-hubs-modelscope-moark-hf WebPulse en 2026-09-30T12:12:29+00:00 China's 2023 Hugging Face block opened a market for home-grown AI hubs https://pulse.adyog.com/insights/eu-cra-container-kubernetes-five-year-duty WebPulse en 2026-09-30T11:09:38+00:00 EU cyber law requires five years of updates for covered container products https://pulse.adyog.com/insights/wsl-containers-ga-windows-admin-controls WebPulse en 2026-09-30T10:12:20+00:00 Microsoft launches Linux containers on Windows with admin controls alongside https://pulse.adyog.com/insights/detectify-open-critical-flaws-older-than-90-days WebPulse en 2026-09-30T10:10:57+00:00 At Detectify customers, most open serious flaws are over three months old https://pulse.adyog.com/insights/cisco-survey-security-controls-six-months WebPulse en 2026-09-30T09:09:57+00:00 Cisco survey: 21% of firms can add a control within 6 months of approval https://pulse.adyog.com/insights/pyjwt-nested-header-recursionerror-500 WebPulse en 2026-09-30T07:14:57+00:00 PyJWT flaw lets one crafted token turn logins into server errors https://pulse.adyog.com/insights/openclaw-enterprise-agent-control-plane WebPulse en 2026-09-30T07:09:50+00:00 OpenClaw says IT teams block AI agents; it launches a free control plane https://pulse.adyog.com/insights/copilot-cowork-poisoned-skill-file-exfiltration WebPulse en 2026-09-30T06:11:07+00:00 Researchers got Copilot Cowork to leak files using a poisoned skill file https://pulse.adyog.com/insights/openbao-vault-four-flaw-rce-chain WebPulse en 2026-09-30T04:11:50+00:00 Four OpenBao flaws chain into code execution; Vault fix still awaited https://pulse.adyog.com/insights/anthropic-ai-rebuilds-malware-when-detected WebPulse en 2026-09-30T04:10:42+00:00 Anthropic: one actor built AI agents to rebuild malware whenever it is flagged https://pulse.adyog.com/insights/storm-3068-azure-devops-pipeline-kubeconfig WebPulse en 2026-09-30T03:10:34+00:00 Attackers built a malicious pipeline to collect Kubernetes keys, Microsoft says https://pulse.adyog.com/insights/ai-model-price-cuts-failed-max-thinking-run WebPulse en 2026-09-30T02:10:00+00:00 New Claude and GPT models launched cheaper, yet a failed request cost $2.56 https://pulse.adyog.com/insights/upm-package-manager-secure-defaults WebPulse en 2026-09-30T01:29:37+00:00 upm package manager skips install scripts and delays new releases by default https://pulse.adyog.com/insights/toptech-tms7-tophat-ten-flaws-release-7-8 WebPulse en 2026-09-30T01:27:40+00:00 Toptech says version 7.8 fixes ten flaws in TMS7 and TopHAT https://pulse.adyog.com/insights/shopify-drops-react-native-agents-cost WebPulse en 2026-09-30T01:23:34+00:00 Shopify drops React Native, saying AI agents cut the cost of native apps https://pulse.adyog.com/insights/mikrotik-routeros-preauth-web-flaw-cisa WebPulse en 2026-09-30T01:19:10+00:00 MikroTik RouterOS flaw lets attackers run code as root with one request https://pulse.adyog.com/insights/lantronix-g520-update-path-root-flaws WebPulse en 2026-09-30T01:17:06+00:00 Two flaws in Lantronix gateways let attackers run root code through updates https://pulse.adyog.com/insights/baicells-nova-430h-no-fix-cve-2026-96274 WebPulse en 2026-09-30T01:13:06+00:00 CISA lists no fix for a Baicells cell radio flaw; vendor did not reply to CISA https://pulse.adyog.com/insights/pixelleak-ai-agents-public-github-screenshots WebPulse en 2026-09-30T00:09:52+00:00 Glow Labs says AI agents left 13,000+ internal images on public GitHub https://pulse.adyog.com/insights/spectre-btr-jit-linux-memory-leak WebPulse en 2026-09-29T23:19:55+00:00 New Spectre flaw leaks Linux memory; CPU makers say software must fix it https://pulse.adyog.com/insights/darpa-xint-ai-military-messaging-apps WebPulse en 2026-09-29T23:16:06+00:00 DARPA selects Xint to research AI security checks for military messaging apps https://pulse.adyog.com/insights/star-blizzard-redflick-single-interaction WebPulse en 2026-09-29T22:14:57+00:00 Microsoft says Star Blizzard's RedFlick needs a single user interaction https://pulse.adyog.com/insights/divd-ai-agent-breach-messy-trail WebPulse en 2026-09-29T22:12:05+00:00 DIVD says a flaw let an intruder in, then an AI agent ran the attack https://pulse.adyog.com/insights/phantomsub-npm-baileys-whatsapp-follow-campaign WebPulse en 2026-09-29T21:15:55+00:00 OX Security: 101 npm packages make developers' WhatsApp accounts follow channels https://pulse.adyog.com/insights/meta-muse-agent-shared-home-address WebPulse en 2026-09-29T21:12:56+00:00 Meta's Muse AI agent gave out a user's home address, he says https://pulse.adyog.com/insights/aws-agentcore-sdk-package-name-flaws WebPulse en 2026-09-29T21:10:04+00:00 AgentCore SDK flaw: a package name could run commands, and the first fix failed https://pulse.adyog.com/insights/rathat-android-trojan-c2-panel-rebuilt WebPulse en 2026-09-29T20:13:41+00:00 Android trojan RATHat stayed the same while its control panel was rebuilt https://pulse.adyog.com/insights/chatbots-drove-real-car-safety-in-code WebPulse en 2026-09-29T20:10:34+00:00 Chatbots drove a real car at low speed; the safety limits sat in code https://pulse.adyog.com/insights/wiz-blue-agent-github-token-aws-service-account WebPulse en 2026-09-29T19:15:31+00:00 Wiz case: 18 cloned repositories likely gave attackers a CI account's AWS keys https://pulse.adyog.com/insights/openclaw-matrix-case-folding-auth-bypass WebPulse en 2026-09-29T19:12:26+00:00 OpenClaw Matrix bug lets one account borrow another's approval rights https://pulse.adyog.com/insights/ai-agent-true-fact-wrong-source-check WebPulse en 2026-09-29T19:09:40+00:00 A true AI answer can still credit the wrong source, and one team built a check https://pulse.adyog.com/insights/fake-chatgpt-custom-gpt-clickfix-rat WebPulse en 2026-09-29T18:10:44+00:00 Attackers used a ChatGPT Custom GPT to lure users to a trojan, Huntress finds https://pulse.adyog.com/insights/ray-vllm-eks-declared-ports-hidden-listeners WebPulse en 2026-09-29T16:16:40+00:00 One EKS test: 15 of 17 open Ray ports were missing from declared port lists https://pulse.adyog.com/insights/opertraitor-kubernetes-operator-permissions WebPulse en 2026-09-29T16:13:47+00:00 Unit 42 finds slightly over 5% of Kubernetes operators it scanned ask for too much access https://pulse.adyog.com/insights/openshell-agent-sandbox-operator-settings WebPulse en 2026-09-29T15:15:20+00:00 In one test, NVIDIA's agent sandbox held; leaks came from operator settings https://pulse.adyog.com/insights/aws-bahrain-uae-war-damage-multi-az-limits WebPulse en 2026-09-29T15:12:24+00:00 AWS says war damage in Bahrain exceeded its multi-zone design limits https://pulse.adyog.com/insights/ai-agents-inside-permissions-wrong-action WebPulse en 2026-09-29T14:10:15+00:00 AI agents can stay within their permissions and still do the wrong thing https://pulse.adyog.com/insights/apple-cve-2026-86950-coregraphics-zero-day WebPulse en 2026-09-29T12:13:34+00:00 Apple fixes a Meta-reported zero-day that may have hit targeted people https://pulse.adyog.com/insights/zhipu-glm-infra-agent-feedback-loop WebPulse en 2026-09-29T11:16:47+00:00 Zhipu says an AI agent helped ready its Flash model in under two weeks https://pulse.adyog.com/insights/rails-8-1-4-fixes-bugs-that-fail-quietly WebPulse en 2026-09-29T11:16:36+00:00 Rails 8.1.4 fixes several bugs that gave wrong results with no error https://pulse.adyog.com/insights/hugo-0-167-untrusted-theme-build-fixes WebPulse en 2026-09-29T11:13:35+00:00 Hugo update fixes ways an untrusted theme could pull files into a site https://pulse.adyog.com/insights/ai-agents-find-workarounds-access-limits WebPulse en 2026-09-29T10:08:41+00:00 OpenAI agent slipped past access limits; card-theft campaign automated attacks https://pulse.adyog.com/insights/sonnet-5-5-price-per-token-cost-per-task WebPulse en 2026-09-29T09:22:10+00:00 Sonnet 5.5 costs ~50% more per task at max effort, tests find https://pulse.adyog.com/insights/vinext-1-0-behavior-not-code-is-the-hard-part WebPulse en 2026-09-29T08:52:05+00:00 Cloudflare uses AI agents to keep a Next.js clone in step with the original https://pulse.adyog.com/insights/llm-decisions-paid-as-prose-jev-classifiers WebPulse en 2026-09-29T08:51:17+00:00 TypeSafe claims Jev AI is 444.6x cheaper than big models, in its own test https://pulse.adyog.com/insights/cloudflare-beacon-web-speed-discovery-delay WebPulse en 2026-09-29T08:48:53+00:00 Cloudflare data: your site's speed depends on who is visiting https://pulse.adyog.com/insights/angular-ssr-doctype-infinite-loop-dos WebPulse en 2026-09-29T08:46:31+00:00 A malformed HTML snippet can freeze Angular server-rendered apps https://pulse.adyog.com/insights/angular-ssr-cve-2026-88058-reachability WebPulse en 2026-09-29T08:45:45+00:00 This Angular flaw needs a specific code path. Ask if you have it https://pulse.adyog.com/insights/supabase-16000-exposed-databases-upguard WebPulse en 2026-09-29T08:19:10+00:00 UpGuard found 16,326 Supabase databases with tables outsiders can read https://pulse.adyog.com/insights/needymantis-post-compromise-malware-microsoft WebPulse en 2026-09-29T08:16:15+00:00 NeedyMantis, used in targeted attacks, disguises itself as trusted software https://pulse.adyog.com/insights/lookalike-letters-llm-token-cost WebPulse en 2026-09-29T08:14:57+00:00 Lookalike letters did not fool seven AI models, yet raised the bill up to 3.9x https://pulse.adyog.com/insights/jadepuffer-azure-service-identities-locks WebPulse en 2026-09-29T08:13:48+00:00 Compromised app logins deleted most targeted Azure storage in 7 minutes https://pulse.adyog.com/insights/github-taskflow-agent-24-android-vulnerabilities WebPulse en 2026-09-29T08:12:55+00:00 GitHub AI found 24 Android flaws; its researcher says experts must check each https://pulse.adyog.com/insights/fbi-hiring-portal-breach-employee-data WebPulse en 2026-09-28T21:20:27+00:00 FBI job-portal breach: staff SSNs exposed per notice; medical data reported https://pulse.adyog.com/insights/cve-2026-77246-mcp-atlassian-file-upload WebPulse en 2026-09-28T21:15:38+00:00 CVE-2026-77246: one HTTP setup let unauthenticated callers pick an upload host https://pulse.adyog.com/insights/medyc-qbusoft-breach-vendor-risk WebPulse en 2026-09-28T20:33:32+00:00 Two Polish health-software breaches show where clinic risk sits https://pulse.adyog.com/insights/emdash-1-0-plugins-declare-access-first WebPulse en 2026-09-28T20:31:02+00:00 Cloudflare says EmDash's sandboxed plugins need approval for extra access https://pulse.adyog.com/insights/cve-2026-32740-libheif-sharp-lab-rce WebPulse en 2026-09-28T20:28:37+00:00 CVE-2026-32740: libheif Bug Reaches RCE in a Permissive Next.js Lab https://pulse.adyog.com/insights/copilot-human-review-prompts-uploads WebPulse en 2026-09-28T20:26:27+00:00 Some Copilot prompts and uploads reach human reviewers, 404 Media reports https://pulse.adyog.com/insights/ai-logins-stealer-logs-follow-employees WebPulse en 2026-09-28T20:24:05+00:00 SOCRadar: ChatGPT's lead in stolen AI logins at 482 firms hints at shadow AI https://pulse.adyog.com/insights/ai-cyber-index-patch-failure-modes WebPulse en 2026-09-28T19:12:34+00:00 One benchmark: 55% of failed AI patches fixed the main flaw, left another open https://pulse.adyog.com/insights/meta-muse-microsoft-autopilot-agent-computers WebPulse en 2026-09-28T18:13:53+00:00 Meta and Microsoft are each giving AI agents a computer of their own https://pulse.adyog.com/insights/carbonato-botnet-docker-hermes-agent-telegram WebPulse en 2026-09-28T18:11:39+00:00 Carbonato botnet turns exposed Docker hosts into Telegram-run AI agents https://pulse.adyog.com/insights/unsw-drunk-ai-models-jailbreak-privacy WebPulse en 2026-09-28T17:14:41+00:00 Drunk-styled AI models were more willing to pass on confidences in UNSW tests https://pulse.adyog.com/insights/facebook-new-mexico-privacy-verdict-43m WebPulse en 2026-09-28T17:12:16+00:00 Facebook Liable for Over 43 Million Violations in New Mexico Privacy Verdict https://pulse.adyog.com/insights/nvidia-open-agent-safety-platform-openshell WebPulse en 2026-09-28T16:22:19+00:00 Nvidia's agent safety platform moves enforcement outside the agent https://pulse.adyog.com/insights/mcp-hostnames-outside-us-ox-security WebPulse en 2026-09-28T16:19:58+00:00 Ox Security: Nearly 16% of Analyzed MCP Hostnames Resolve Outside the US https://pulse.adyog.com/insights/kiteworks-advanced-forms-shutdown-advisory WebPulse en 2026-09-28T16:17:38+00:00 Kiteworks Advised a Nine-Hour Shutdown Over a Flaw It Says Is in One Product https://pulse.adyog.com/insights/bcg-ai-employee-label-fewer-errors-caught WebPulse en 2026-09-28T16:15:14+00:00 Wired: BCG says managers caught 18% fewer errors on AI 'employee' work https://pulse.adyog.com/insights/siemens-simove-siplant-path-traversal-cve-2026-67367 WebPulse en 2026-09-28T15:14:00+00:00 Siemens SIMOVE and SIPLANT flaw could expose system files without a login https://pulse.adyog.com/insights/siemens-iem-cve-2026-18963-reset-bypass WebPulse en 2026-09-28T15:11:43+00:00 Siemens Industrial Edge Management bug allows account takeover via reset https://pulse.adyog.com/insights/soldier-70-months-credential-extortion-10-firms WebPulse en 2026-09-28T14:17:25+00:00 Ex-soldier gets 70 months for extorting at least 10 tech and telecom firms https://pulse.adyog.com/insights/ai-agent-hacks-state-law-disclosure-gap WebPulse en 2026-09-28T14:14:54+00:00 State AI laws likely didn't require OpenAI to disclose its agent hacks https://pulse.adyog.com/insights/botslab-g980h-dashcam-cisa-no-vendor-response WebPulse en 2026-09-28T13:12:03+00:00 CISA: Botslab has not responded to mitigation requests on G980H dashcam flaws https://pulse.adyog.com/insights/citrix-netscaler-cve-2026-88771-88772-cisa-kev WebPulse en 2026-09-28T12:11:34+00:00 CISA sets Sept. 30 deadline for two exploited Citrix NetScaler flaws https://pulse.adyog.com/insights/mailed-fake-cards-and-magstripe-skimming WebPulse en 2026-09-28T11:12:02+00:00 Mailed fake cards and stripe skimming still cost victims, WIRED reports https://pulse.adyog.com/insights/aws-reimagine-2026-ai-governance-gap WebPulse en 2026-09-28T11:01:11+00:00 AWS-commissioned European survey: 24% document a responsible-AI approach https://pulse.adyog.com/insights/terraform-providers-go-malware-hashicorp-registry WebPulse en 2026-09-28T10:04:29+00:00 Terraform providers used to deliver Go malware, Aikido reports