Blahalla

Pwn2Own Ireland 2026 Day 1: 32 Zero-Days, $388,500, Samsung Galaxy S26 Hacked 3 Times

www.zerohack.org · 11 days ago

Full Day One results from Pwn2Own Ireland 2026. The scoreboard: 32 unique zero-days demonstrated. $388,500 in total bounties. Samsung Galaxy S26 compromised three times. AI infrastructure targeted for the first time, including OpenAI Codex, Oracle Autonomous AI Database, and LiteLLM. Longest chain of the day: Philips Hue Bridge Pro, seven zero-days.

Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens

gbhackers.com · 11 days ago

Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers confirmed successful exfiltration of 26 secrets from 13 repositories, highlighting the distinction between malicious injections and executed payloads.

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

thehackernews.com · 11 days ago

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.

I found yet another way to invoke JavaScript functions without parentheses

blog.ikaes.de · 11 days ago

It turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks.

PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion

gbhackers.com · 11 days ago

A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing applications. Active since April 2026, the operation combines vulnerability exploitation, cryptocurrency miners and an unusual command-and-control mechanism that derives server addresses from a poem hosted on GitHub.

Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.

gbhackers.com · 11 days ago

MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active since August 2023, the campaign delivers Overlord RAT, the movinlike information stealer, and a separate downloader concealed inside an ASCII-art utility.

SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug

www.csoonline.com · 11 days ago

SonicWall has disclosed yet another critical flaw in one of its core products. CVE-2026-102255, rated 10 in severity, the highest possible on the Common Vulnerability Scoring System (CVSS), is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface.

Smashing Security podcast #487: Clippy’s crypto comeback

grahamcluley.com · 11 days ago

Microsoft's Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy crypto coin, and a corporate apology that wasn't from Microsoft either. Meanwhile, UK losses from hacked email and social media accounts have rocketed by 417%, as scammers pose as your friends to flog you tickets to gigs that don't exist.

Ransomware recovery CEO charged over secret ransom payments

www.bleepingcomputer.com · 11 days ago

The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data.

Evolution of Web3 in Cloud Supply Chain Attacks

unit42.paloaltonetworks.com · 11 days ago

Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments

Australian Gov't Weighs Mandatory AI Incident Reporting

www.darkreading.com · 11 days ago

In the wake of an agentic attack against its own Medicare systems, Australia's government is feeling out what regulations might look like for frontier AI companies.

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

www.bleepingcomputer.com · 11 days ago

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators.

Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives

www.darkreading.com · 11 days ago

The Citizen Lab's Ron Deibert warns the US government is pushing for pervasive surveillance and says certain technology executives are all too happy to help.

OpenAI releases progress on more than 300 math research problems, stunning humans

www.washingtonpost.com · 11 days ago

This staggering quantity of mathematical progress builds on AI developments that have unsettled the research community.

Data center boom is pushing prices higher, according to Fed officials

www.washingtonpost.com · 11 days ago

Federal Reserve officials are increasingly pointing to the artificial intelligence buildout, rather than tariffs, to explain why the prices of goods keep rising.

Anthropic Gives Vetted Defenders Fewer Claude Guardrails

www.darkreading.com · 11 days ago

Anthropic has merged Project Glasswing into a tiered access program for its advanced cyber LLMs, including Opus, Sonnet, and Mythos.

Hackers hijack Google domains after breaching ccTLD registries

www.bleepingcomputer.com · 11 days ago

Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records.

Why A.I. Agents Are Going Rogue

www.nytimes.com · 11 days ago

Our journalists Sheera Frenkel and Dylan Freedman break down what A.I. agents are, how they differ from chatbots and why A.I. companies are worried about them now.

OpenAI Agent Escape Causes Wikimedia Service Outage

www.darkreading.com · 11 days ago

Autonomous agents also tried to abuse other websites and services hosted by the foundation, using them as proxies for unauthorized activities.

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

thehackernews.com · 11 days ago

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in.gh (Ghana).sl (Sierra Leone) or.as (American Samoa) was put at risk.

Best Smart Home Security Cameras for 2026: Ring, Nest, Arlo and Eufy

www.techrepublic.com · 11 days ago

We compare current Ring, Nest, Arlo, and Eufy outdoor security cameras by video quality, AI features, storage, subscriptions, and long-term cost.

A.I. Music Fraudster Who Drew Millions in Royalties Is Sentenced to 18 Months

www.nytimes.com · 11 days ago

Prosecutors say Michael Smith flooded music-streaming platforms with bots that repeatedly streamed his A.I.-generated music, earning him as much as $8 million.

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

thehackernews.com · 11 days ago

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx.

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

thehackernews.com · 11 days ago

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.

3 lessons from frontier AI vulnerability research

www.microsoft.com · 11 days ago

Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel.

Cisco NX-OS Software Security Hardening Release: October 2026