Cybersecurity - Page 22

CrowdStrike says an unnamed, likely Chinese-speaking attacker used ARTEX, an open-source AI penetration-testing agent, alongside several AI models to steal data from South Korean financial firms. What CrowdStrike found, what Korean investigators say, and what it does not prove.

Ledger says it is investigating reports of lost funds among South East Asia customers who bought devices from the reseller CryptoBilis, and has asked the reseller to pause sales. Loss totals of about $86m come from Hacken and an on-chain analyst, not Ledger. The cause is unconfirmed.

Travel site skyticket says about 14.64 million records were taken. Bookoff says up to about 6.43 million, and Times Car, Lawson, karaoke firm Daiichikosho, H.I.S. and resort operator Resorttrust have also disclosed leaks. What each company has confirmed, what Kyodo reports, and what it means for customers.

Three newly disclosed incidents: Ginkgo Bioworks says an outsider accessed data from cloud environments tied to its former biosecurity business; Turkey's data regulator says a ransomware attack on Yıldız Technical University may affect about 140,000 students and 4,500 staff; and Green Clinic in Ruston, Louisiana, is rebuilding after ransomware locked its records. What each organisation has confirmed.

OpenAI says it banned two influence operations, one from Russia running a fake Latin American think tank and one from Iran pitching articles under seven fake bylines. It rates the Russian one the first "Category 5" operation it has disrupted. What happened, what AI did and didn't do, and what remains unproven.

On 8 October 2026 the US Justice Department and FBI seized web domains behind two hacking tools allegedly run by China-based Integrity Technology Group, linked to "Flax Typhoon". Eleven agencies from seven countries issued a joint advisory, and CISA added five old flaws to its exploited-vulnerabilities list. What was done, what is alleged, and what defenders are told.

Three agent-security stories from 8 October. Zenity says one prompt to an exposed AWS AgentCore agent could lead to control of every agent in the same account and region, and AWS disputes it. Claude Code adds an option that blocks an action when a safety hook fails. Cisco Talos finds malware that writes to AI analysts. What each shows, and what it does not.

An unreleased "Additional sandbox options" setting found in Google's Gemini desktop app for Mac would let the AI reach files, apps and network connections beyond the folders users connect today. It is hidden, unconfirmed by Google and arrives just as Apple is tightening Full Disk Access.

A GAO audit found none of 24 major US agencies had fully done three basic steps to prepare for quantum-safe encryption, and only one had a complete inventory of vulnerable systems. The same day, Chrome 155 gave web developers built-in post-quantum algorithms and OpenSSH 10.6 added quantum-resistant login signatures; Surfshark says its WireGuard VPN is now post-quantum for authentication too. What each means, and why quantum-safe website certificates are a separate, later job.

A critical Langflow flaw let MCP server settings run any command. Researchers say GitHub's Copilot CLI followed encrypted instructions that it refused in plain text; GitHub says that is not a vulnerability. Meanwhile Atlassian has split its 220+ agent tools into read, write and destructive tiers, and OpenAI has made Codex Auto-review free. What each one confirms.