|
💳 AI agents used to target 400+ banks
LINK
|
- A cybercrime group called CyberCartel ran AI agents to coordinate attacks on more than 400 banks and payment firms across Latin America, using models from Anthropic, xAI and Moonshot AI, according to researchers at Straiker.
- The system, named CARLIY0S, gave Claude models separate roles for planning and decisions, used Grok to gather stolen secrets into a database called FinancialSoft, and fell back on Moonshot's Kimi models when requests were refused.
- Straiker found 4,493 records including passwords, account numbers and API keys, some tied to Mexico's SPEI payment system; Anthropic revoked a linked credential and xAI was investigating the reported Grok activity.
|
🐘 Critical PHP flaw threatens millions of sites
LINK
|
- PHP has shipped emergency fixes for two critical flaws, together named PHP2Shell, that let an attacker with no account run code on a web server across almost every version going back to PHP 5.4.
- Rated 9.2 and led by CVE-2026-109618, the flaws sit in the PHP engine itself, so even a "Hello World" page is exposed; Cloudflare saw early exploit attempts, though no successful break-in has been confirmed.
- Only updating to the latest release on each supported PHP branch and restarting workers fully protects a server; the circulated workaround of turning off session upload progress reduces one attack path but never fully fixes the problem.
|
🤖 Chinese hackers use AI to breach clouds
LINK
|
- A China-linked hacking group called Storm-0940 broke into ConnectWise's Cloud Backup product and used an open-source AI tool to turn stolen credentials against more than 2,250 Microsoft 365 accounts, Microsoft said.
- The attack, active since September 2026 and spotted in the wild, ran through a Chinese AI framework named ARTEX that attempted 2,900 sign-ins per minute and reached privileged cloud access in under three hours at some victims.
- Microsoft told customers to keep affected ConnectWise connections turned off until restoration guidance arrives, avoid deleting enterprise apps first, search tenants by four application IDs, and review activity back to October 1.
|
🔓 Popular AI code tool LiteLLM hacked to steal cloud keys
LINK
|
- LiteLLM, a widely used proxy for large language model providers, shipped a malicious version 1.107.0 that steals cloud keys, private keys, browser data, and credentials for AI tools like Claude, Codex, and Cursor.
- The attack hid in Python startup files that run before LiteLLM is even imported, and build records show the release workflow pulled from a lookalike repository named Berri-AI, one hyphen off from the real BerriAI project.
- Socket flagged all seven wheels on PyPI roughly seven minutes after they published on Tuesday, and the payload also reached container images on floating tags; teams should stop deploying 1.107.0 and check any place Python ran after install.
|
🛠️ Splunk patches three critical 9.9 flaws
LINK
|
- Splunk rolled out security updates yesterday fixing three critical bugs scored 9.9 out of 10, two in Splunk Enterprise and one in Splunk SOAR, along with two separate remote code execution flaws in Enterprise.
- The company has not said whether the trio, including CVE-2026-76531 in SOAR, allow unauthenticated remote code execution, and no exploitation in the wild or public proof of concept is reported for them.
- Admins should upgrade Enterprise to the fixed version for their branch and SOAR to 8.7.0; a temporary workaround disables the PostgreSQL sidecar but breaks Edge Processor and related pipelines.
|
|
