CISA Warns of Chinese State-Linked Actors Using Automated and Hands-On Hacking
CISA and partner agencies issued a joint advisory on October 8 describing Chinese government-linked cyber threat actors that combine automated tooling with hands-on activity to steal sensitive data. The advisory…
ARTEX AI Pentesting Tool Linked to Data-Theft Campaign Against South Korean Finance
Security researchers have disclosed a campaign against South Korean financial organizations that reportedly used ARTEX, an AI-driven penetration-testing tool, alongside large language models. CrowdStrike Intelligence said the activity ran from…
Critical LMCache Flaw Highlights Risk in Exposed LLM Inference Infrastructure
Security reporting has highlighted CVE-2026-105192, a critical vulnerability in LMCache, a cache layer used alongside vLLM deployments. The reported issue is an insecure-deserialization path in multiprocess or distributed deployments that…
GoBalance Bug Can Expose .onion Service Keys, Forcing Address Migration
A reported flaw in GoBalance, a Go implementation used by some hidden services for availability, can allow recovery of the private key controlling an affected .onion address from public information.…
PoeLLM Malware Uses a GitHub Poem to Locate Its Command Infrastructure
Researchers have described PoeLLM, a cryptomining-focused malware campaign that uses a GitHub-hosted poem to recover command-and-control information. The campaign reportedly affected more than 3,400 servers, with AI-serving and tooling environments…
Exploited AhsayCBS Flaws Put Backup Management Interfaces at Risk
Huntress has reported active exploitation of two AhsayCBS backup-management vulnerabilities, CVE-2026-105133 and CVE-2026-105134. Reporting says the flaws can be chained to bypass authentication and execute operating-system commands on exposed systems.…
CISA Warns of China-Linked Campaign Using Botnets and Hands-On Intrusions
CISA and international partners issued a joint advisory on China-linked activity enabled by Integrity Technology Group. The agencies say the actors combined automated scanning, botnets, VPN infrastructure and hands-on intrusion…
Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
Splunk has released security updates for CVE-2026-76268, a critical Splunk Enterprise vulnerability reported to allow unauthenticated remote operating-system command execution. The vulnerability carries a CVSS v3.1 score of 9.8. Because…
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Researchers have identified 16 malicious Mozilla Firefox extensions that impersonate Rabby and OKX wallet tools and can steal cryptocurrency-wallet recovery phrases and private keys. Browser extensions can inherit broad access…
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
A Tensorlake npm package was reportedly compromised to distribute the Shai-Hulud credential-stealing worm. Researchers cited by the report said the first rogue commit appeared on October 7, 2026. Supply-chain incidents…