Cyber ·
Stolen AI API keys are paying for automated attack scans
Bitsight found an autonomous attack tool for sale on a criminal forum that runs on stolen AI provider keys, so the key owner pays for the scans.
Cyber
Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Six Linux kernel vulnerabilities (Infinity Core set) enable privilege escalation
A report published on October 16, 2026 on the oss-sec mailing list describes six flaws in the Linux kernel Timer, Signal, MM, Futex, Scheduler and SLAB subsystems, with potential for local privilege escalation, container escape and privilege escalation on Android.
Cyber ·
CVE-2026-104715: mount option injection in cifs-utils mount.cifs, fixed in version 7.9
Advisory on mount option injection in mount.cifs that may allow local privilege escalation. The fix is in cifs-utils 7.9, released alongside the advisory on October 16.
Cyber ·
Proofpoint announces acquisition of Varonis for US$ 6.3 billion in cash
Proofpoint said it will acquire Varonis, a Miami-based data visibility and security company, in an all-cash deal valued at US$ 6.3 billion. The item is a machine translation of content from The Record feed.
Cyber ·
Recent and upcoming changes in the Linux NFS server
Jeff Layton, NFS developer, presented at the Linux Plumbers Conference 2026 an overview of recent improvements to the Linux NFS server and hints about what may come soon. The item is a machine translation of a LWN feed entry.
Cyber ·
Results of the 2026 election for the Linux Foundation Technical Advisory Board
The 2026 election results for the Linux Foundation TAB were announced: Kees Cook, Dave Hansen, Miguel Ojeda and Shuah Khan were re-elected, and Laurent Pinchart will join the board.
Cyber ·
Moscow police detain three suspects linked to DataSuckers hacker group
According to a report from The Record's feed, Russian authorities reportedly detained three suspects said to be members of the DataSuckers group, after an attack exposed customer data from a popular restaurant chain.
Cyber ·
Friday security updates across Linux distributions
Linux distributions published security updates for several packages, including Chromium, cifs-utils, kernel, OpenSSH and QEMU. The summary is an automatic translation of a feed item from LWN, dated 16 October 2026.
Cyber ·
Anne Arundel County confirms August data breach after ransomware claims
Anne Arundel County, Maryland, confirmed that an attacker stole files from government systems in an August attack, after ransomware claims surfaced. Investigators are still assessing how much data was exposed.
Cyber ·
Suspected Chinese espionage actors exploit zero-day in BeyondTrust IT support software
According to a report reproduced from a The Record feed, a group allegedly linked to the Chinese state is exploiting a zero-day vulnerability in BeyondTrust IT support software for espionage.
Cyber ·
CISA warns of active exploitation of critical BeyondTrust Remote Support flaw
CISA recommends applying fix BT26-05-RS against CVE-2026-102764, a critical authentication bypass under active exploitation in BeyondTrust Remote Support versions 26.2.3 and earlier.
Cyber ·
CISA and FBI warn of phishing and smishing against election officials and campaigns in 2026
A public service announcement from CISA and the FBI describes phishing and smishing campaigns seeking credentials, sensitive data or malware installation against election officials and campaign teams in the 2026 U.S. midterm elections.
Cyber ·
CISA adds two exploited vulnerabilities to KEV catalog: Fortinet and BeyondTrust
CISA added CVE-2025-61624, a path traversal flaw in several Fortinet products, and CVE-2026-102764, an authentication bypass by spoofing in BeyondTrust Remote Support, to its KEV catalog, based on evidence of active exploitation.
Cyber ·
Ten voluntary practices for superintelligence control incident readiness
NIST, NSA SISC and CISA published voluntary practices to help organizations prepare for and respond to control incidents involving superintelligence agents during training and evaluation.
Cyber ·
Quantum batteries: balancing high power with stable energy supply
Radar logs a short note dated 16 October 2026 that names the challenge of balancing high power in quantum batteries with a stable energy supply. The source contains no cybersecurity information, so it is recorded as context only.
Cyber ·
Cosmic confinement: a physics finding on the stability of the Universe
Radar records the report that physicists identified a phenomenon called cosmic confinement, which appears to reduce the risk of the Universe collapsing into another state. The item does not concern cybersecurity, despite its source classification.
Cyber ·
CVE-2026-90910: Apache Answer up to 2.0.2 lets unauthorized users access restricted content via reactions API
Moderate-severity advisory: the reactions API in Apache Answer up to version 2.0.2 did not enforce visibility controls. Version 2.0.3 fixes the issue.
Cyber ·
CVE-2026-86589: Apache Answer does not revoke sessions after central account suspension
Moderate-severity flaw in the User Center login integration of Apache Answer up to version 2.0.2. Newly created sessions may lack the external identity, letting later requests bypass suspension or deletion checks on the central account until the session ends.
Cyber ·
CVE-2026-79633: missing authorization in Apache Answer up to version 2.0.2
Moderate-severity advisory: authenticated users of Apache Answer up to version 2.0.2 could act on non-public content without authorization. Version 2.0.3 fixes the issue.
Cyber ·
CVE-2026-79624: Apache Answer keeps access to private uploads after session revocation
Moderate-severity advisory: Apache Answer up to 2.0.2 does not fully invalidate revoked sessions, so stale visitor tokens can still read known private files. The fix is in version 2.0.3.