Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. [...]
O GitLab informou nesta segunda-feira que corrigiu uma vulnerabilidade que poderia permitir a um atacante executar código remotamente em um servidor afetado. A falha de gravidade crítica, rastreada como CVE-2026-97229, decorreu da falha dos servidores GitLab Community Edition e E…
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
A SAP corrigiu 20 falhas de segurança em diversos produtos nas atualizações de outubro de 2026, incluindo uma vulnerabilidade de gravidade máxima no Cloud SDK para Python. Rastreada como CVE-2026-89111, a falha pode ser explorada por atacantes remotos sem privilégios para roubar …
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self…
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to "act immediately." …
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's o…
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
Os ataques cibernéticos contra equipamentos de refrigeração de supermercados na França não terminaram. Vinte e quatro horas depois da primeira ofensiva, que desativou os sistemas de centenas de lojas que usam controladores legados da marca Danfoss, na noite de domingo, 11, para s…
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
Torrance, California, 13th October 2026, CyberNewswire
The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security tea…
A campanha GhostAction voltou com uma técnica mais ampla. Em 8 de outubro, duas contas de mantenedor comprometidas injetaram um workflow malicioso em 346 repositórios do GitHub, entre eles o uber/athenadriver e o kitao/pyxel, que tem mais de 18 mil estrelas. O arquivo se chama se…
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The…
A four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but…
