-
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the …
-
Biggest Cyber Attacks, Data Breaches, Ransomware Attacks: October 2026
Attackers breached Advantest’s IT network in February 2026 and deployed ransomware. The company later confirmed that personal information …
-
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for …
-
The first ten lines of a command policy for AI coding agents
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI …
-
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large …
-
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their …
-
Product showcase: Trust Onion uses rotating codewords to verify callers
Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes …
-
Ransomware gang talked AI agents into doing much of its dirty work
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to …
-
Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation
On Saturday, October 24, 2026 we conducted a successful exercise demonstrating that the AWS European Sovereign Cloud can operate without …
-
CVE-2026-18199 – Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions …
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote …
-
CVE-2026-103310 – The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the …
The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the …
-
CVE-2026-101184 – Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation …
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect …
●●●
NVD
- CVE-2026-120276 – A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability …
- CVE-2026-120277 – A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This …
- CVE-2026-18199 – Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions …
- CVE-2026-120279 – A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown …
- CVE-2026-120278 – A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infras