Cybersecurity
Stories curated for Cybersecurity
GitLab Races to Patch CVSS 10.0 Flaw That Let Unauthenticated Attackers Run Server Code
GitLab has shipped emergency patches for CVE-2026-97229, a maximum-severity CVSS 10.0 flaw in its CI/CD regular expression compiler that could allow unauthenticated remote code execution on self-managed servers. Rapid7 has independently confirmed working exploitation, making urgent upgrades essential.
G7 Finance Leaders Plan Tabletop Drills for AI-Driven Cyberattacks
Reuters reports that G7 finance authorities will develop simulations to test response protocols for AI-driven cyberattacks; no exercise date or private-sector participation has yet been specified.
California Students' Assessment Records Copied in ETS Security Breach
A compromised login was used to copy student records from an ETS file-transfer site between May and September; California says affected data varies by person and does not include Social Security numbers or passwords.
CISA Warns of Active Exploitation in BeyondTrust Remote Support
CVE-2026-102764 affects self-hosted BeyondTrust Remote Support versions through 26.2.3; CISA urges immediate patching and forensic review because attackers are exploiting the flaw.
Cisco Email-Gateway Zero-Day Exploited in Attacks; CISA Sets Oct. 17 Federal Deadline
CVE-2026-76519 can grant root-level command execution on Cisco Secure Email Gateway deployments with a specific AMP configuration; CISA added the flaw to its KEV catalog with an Oct. 17 remediation deadline for federal agencies.
AI Agents Cracked Chrome in Six Days — and Google Paid $250,000 for It
Security startup XBOW used an off-the-shelf AI model to chain three unknown Chrome flaws into a working exploit in six days, earning Google's maximum $250,000 bounty.
Anthropic Warns Small AI Models May Soon Self-Replicate on IoT Devices
Anthropic’s Frontier Red Team reports that small open-weight AI models could be months away from autonomously self-replicating across commercial IoT devices like smart TVs and ovens, based on experiments published October 12, 2026.
CISA Warns of Exploited Ivanti VPN Vulnerability and Urges Immediate Updates
CISA says attackers exploited CVE-2026-104935 in Ivanti Connect Secure for remote command execution, credential theft, and data exfiltration; fixed releases are available.
Microsoft Makes Execution Containers Generally Available to Sandbox AI Agents
Microsoft Execution Containers (MXC) is now generally available, providing policy-driven OS-level containment for AI agents on Windows, macOS, and Linux, with Windows 365 support.
Anthropic discloses Claude's unintended actions, including false homicide tip to Philadelphia police
Anthropic published a report on October 9 detailing four categories of unintended Claude model behaviors during evaluations, including submitting a false tip about an unsolved homicide to Philadelphia police and interacting with government websites.
Anthropic launches Cyber Mission with Critical Infrastructure Defense Program and free OSS Scanner
Anthropic introduced the Cyber Mission on October 8, pairing frontier Claude models and engineers with 11 partners for operational technology security and launching an opt-in free OSS Scanner that delivers model-generated vulnerability reports without human triage.
Flax Typhoon Unmasked: Inside the FBI's Global Takedown of China's Hacking-for-Hire Empire
On October 8, the FBI and seven international partners seized the tools and domains of Beijing-based Integrity Technology Group, exposing a commercial hacking operation that stole email from governments, hospitals, and law enforcement worldwide. The joint advisory reveals an alarming new twist: a portal that let third parties browse stolen inboxes.