https://breach-signal.com/artificial-intelligence/gen-digital-ai-agents-inherit-permissions-hijacking-risk/Breach Signalen2026-10-24T18:58:11+00:00Gen Digital warns AI agents inherit employee permissions and attackers can hijack them https://breach-signal.com/vulnerabilities/eff-ai-accelerates-vulnerability-discovery-patching/Breach Signalen2026-10-24T18:28:11+00:00EFF says Frontier AI is driving faster vulnerability discovery https://breach-signal.com/artificial-intelligence/ai-agents-full-domain-control-attack/Breach Signalen2026-10-24T17:58:11+00:00Attackers used AI tools to gain full domain control for about $12 https://breach-signal.com/vulnerabilities/x402-sdk-flaw-ai-agent-wallets/Breach Signalen2026-10-24T17:28:11+00:00V12 disclosed critical x402 SDK flaw letting malicious APIs drain AI agent wallets https://breach-signal.com/cybercrime/fbi-arrests-contractor-substack-classified-info/Breach Signalen2026-10-24T16:59:46+00:00FBI arrests contractor charged with transmitting classified national defense information to Substack https://breach-signal.com/vulnerabilities/emudhra-ends-ssl-tls-issuance-weak-keys-cracked/Breach Signalen2026-10-24T16:58:12+00:00eMudhra ends SSL/TLS certificate issuance after keys cracked in under a second https://breach-signal.com/vulnerabilities/openai-brotli-decoder-flaw-cve-2026-111497/Breach Signalen2026-10-24T15:38:12+00:00OpenAI discloses Brotli decoder flaw CVE-2026-111497 in Node.js, Bun, Python and Envoy https://breach-signal.com/vulnerabilities/php2shell-patches-rushed-leak-exploit-surge/Breach Signalen2026-10-24T13:48:33+00:00PHP project rushes PHP2Shell patches after leak and exploit surge https://breach-signal.com/artificial-intelligence/anthropic-critical-infrastructure-defense-program-claude/Breach Signalen2026-10-24T13:18:33+00:00Anthropic launches Critical Infrastructure Defense Program with Claude and on-site engineers https://breach-signal.com/vulnerabilities/php-flaws-force-emergency-patching-sites-offline/Breach Signalen2026-10-24T12:48:34+00:00PHP flaws force emergency patching as websites go dark https://breach-signal.com/policy/uk-ai-security-budget-healey-nvidia/Breach Signalen2026-10-24T10:35:24+00:00Healey pledges hundreds of millions for British AI security in budget https://breach-signal.com/policy/eff-dma-interoperability-security-privacy/Breach Signalen2026-10-24T10:05:24+00:00EFF says DMA interoperability mandates can work with strong security https://breach-signal.com/artificial-intelligence/openai-moves-frontier-ai-training-offline-environment/Breach Signalen2026-10-24T03:53:06+00:00OpenAI Moves frontier AI model training to offline environment https://breach-signal.com/critical-infrastructure/trump-musk-starshield-ukraine-military/Breach Signalen2026-10-24T03:18:08+00:00Trump calls Musk to lift Starshield limits for Ukraine’s military https://breach-signal.com/threat-actors/microsoft-storm-0940-artex-connectwise-breach/Breach Signalen2026-10-24T02:46:57+00:00Microsoft says China-linked Storm-0940 used AI tool ARTEX against ConnectWise https://breach-signal.com/threat-actors/eset-discloses-mesh-backdoor-ukraine-wiper-attack/Breach Signalen2026-10-24T02:16:57+00:00ESET discloses mesh backdoor in Ukraine wiper attack https://breach-signal.com/threat-actors/microsoft-litellm-supply-chain-compromise-python-hooks/Breach Signalen2026-10-24T01:46:57+00:00Microsoft details LiteLLM 1.107.0 supply chain compromise via Python startup hooks https://breach-signal.com/vulnerabilities/cisa-adds-cve-2026-110447-kev-catalog/Breach Signalen2026-10-24T01:16:57+00:00CISA Adds CVE-2026-110447 to Known Exploited Vulnerabilities Catalog https://breach-signal.com/ransomware/socradar-phantom-ai-ransomware-intrusion-framework/Breach Signalen2026-10-24T00:46:57+00:00SOCRadar uncovers AI intrusion framework tied to ransomware affiliates https://breach-signal.com/policy/fcc-bans-hisilicon-chips-covered-list-enforcement/Breach Signalen2026-10-24T00:16:57+00:00FCC bans wireless video transmitter and dashboard camera with HiSilicon chips https://breach-signal.com/vulnerabilities/ai-assisted-research-finds-critical-php-flaws/Breach Signalen2026-10-23T23:46:57+00:00AI-assisted research finds critical PHP flaws as exploit attempts surge https://breach-signal.com/vulnerabilities/php-emergency-patches-php2shell-flaws-exploited/Breach Signalen2026-10-23T23:44:08+00:00PHP releases emergency patches for PHP2Shell flaws as exploit attempts rise https://breach-signal.com/vulnerabilities/cve-2026-30612-time4popcorn-updater-flaw/Breach Signalen2026-10-23T23:16:57+00:00Eye Security finds CVE-2026-30612 in abandoned Time4Popcorn app https://breach-signal.com/privacy/11th-circuit-florida-georgia-social-media-age-limits/Breach Signalen2026-10-23T22:46:58+00:0011th Circuit rulings let Florida and Georgia enforce social media age limits https://breach-signal.com/artificial-intelligence/spain-people-party-ai-deepfake-ad-election/Breach Signalen2026-10-23T21:40:13+00:00Spain’s opposition People’s Party releases AI deepfake ad before November vote https://breach-signal.com/privacy/wyden-booker-targeted-ads-security-risk/Breach Signalen2026-10-23T20:11:42+00:00Wyden and Booker cite Citizen Lab research to call targeted ads a security risk https://breach-signal.com/artificial-intelligence/ai-agents-shrink-junior-technical-hiring/Breach Signalen2026-10-23T19:30:13+00:00Anthropic says AI agents are shrinking junior technical hiring https://breach-signal.com/privacy/facewatch-300k-biometric-alerts-uk-facial-recognition/Breach Signalen2026-10-23T18:01:14+00:00Facewatch issued about 300,000 biometric alerts in early 2026 and seeks facial-recognition rules https://breach-signal.com/threat-actors/mirai-potassium-botnet-php2shell-exploitation-attempts/Breach Signalen2026-10-23T16:54:16+00:00Mirai-derived Potassium botnet linked to PHP2Shell exploitation attempts https://breach-signal.com/vulnerabilities/php-warns-unpatched-rce-php2shell-patches/Breach Signalen2026-10-23T16:38:39+00:00PHP warns of unpatched RCE two days after emergency PHP2Shell patches https://breach-signal.com/vulnerabilities/hpe-patches-eight-max-severity-arubaos-vulnerabilities/Breach Signalen2026-10-23T16:24:17+00:00HPE patches eight max severity RCE and auth bypass AOS flaws https://breach-signal.com/threat-actors/kaspersky-apt41-blackx-bootkit-central-asia-diplomatic-compromise/Breach Signalen2026-10-23T14:23:54+00:00Kaspersky attributes Central Asia diplomatic compromise to APT41 BlackX bootkit https://breach-signal.com/tech-industry/october-2026-infosec-product-roundup/Breach Signalen2026-10-23T13:23:59+00:00Help Net Security rounds up four new infosec products https://breach-signal.com/privacy/australian-class-action-meta-children-social-media-addiction/Breach Signalen2026-10-23T08:38:11+00:00MinterEllison files Australian class action on behalf of children and teenagers https://breach-signal.com/vulnerabilities/signal-ringrtc-cve-2026-113380-mic-camera-stays/Breach Signalen2026-10-23T05:28:12+00:00Signal RingRTC flaw CVE-2026-113380 leaves microphone and possibly camera active after call ends https://breach-signal.com/cybercrime/huntress-tracks-microsoft-365-token-replay-campaign/Breach Signalen2026-10-23T04:58:12+00:00Huntress tracks 10-week Microsoft 365 token replay campaign https://breach-signal.com/policy/treasury-proposes-outbound-investment-curbs-ai-tech/Breach Signalen2026-10-23T04:28:12+00:00Treasury proposes expanding Outbound investment curbs on AI and high tech https://breach-signal.com/data-breaches/capcom-id-breach-11-774-247-accounts/Breach Signalen2026-10-23T03:39:10+00:00Capcom confirms hackers breached CAPCOM ID, exposing 11,774,247 accounts https://breach-signal.com/vulnerabilities/signal-ringrtc-flaw-cve-2026-113380-audio-hang/Breach Signalen2026-10-23T03:09:10+00:00Signal RingRTC flaw keeps audio flowing after hang-up https://breach-signal.com/data-breaches/railway-tells-customers-rotate-secrets-potential-breach/Breach Signalen2026-10-23T02:39:11+00:00Railway tells all customers to rotate secrets after potential breach https://breach-signal.com/cybercrime/exaforce-ai-agents-machine-speed-data-exfiltration/Breach Signalen2026-10-23T02:04:58+00:00Exaforce says machine-speed attacks exfiltrate data in minutes as human SOCs lag https://breach-signal.com/policy/cisa-canada-ai-token-consumption-guidance/Breach Signalen2026-10-23T01:34:58+00:00CISA and Canadian partners release guidance on AI token consumption https://breach-signal.com/vulnerabilities/cisco-patches-34-vulnerabilities-critical-rce-flaws/Breach Signalen2026-10-23T01:04:58+00:00Cisco patches 34 vulnerabilities including critical remote code execution flaws https://breach-signal.com/vulnerabilities/anthropic-claude-open-source-security-controls-disabled/Breach Signalen2026-10-23T00:34:58+00:00Anthropic finds 94 cases across 25 projects where controls were silently disabled https://breach-signal.com/data-breaches/quest-diagnostics-patient-records-breach/Breach Signalen2026-10-22T23:34:58+00:00Quest Diagnostics discloses breach of certain patient records https://breach-signal.com/threat-actors/emudhra-weak-ca-keys-ssl-tls-exit/Breach Signalen2026-10-22T23:04:58+00:00Researcher finds eight weak eMudhra intermediate CA keys belonging to Indian authority as it exits SSL/TLS business https://breach-signal.com/vulnerabilities/php2shell-vulnerability-prompts-government-website-shutdowns/Breach Signalen2026-10-22T22:34:58+00:00Authorities take government websites offline over PHP flaw https://breach-signal.com/critical-infrastructure/arista-patches-velocloud-orchestrator-zero-day/Breach Signalen2026-10-22T22:05:32+00:00Arista patches actively exploited VeloCloud Orchestrator zero-day https://breach-signal.com/data-breaches/railway-breach-exposes-decrypted-environment-variables/Breach Signalen2026-10-22T20:06:02+00:00Railway urges all users to revoke keys after breach exposes decrypted environment variables