Five OVHcloud CLI releases swapped for secret-stealing malware via hijacked account
Published 7:01 AM · 120 articles from 15 sources · about 5 min to read in full
Cyber security
Supply-chain compromises of release and update channels lead the day, alongside ongoing exploitation of Plex and Siemens software. ShinyHunters-linked breaches and retail and staffing outages continue, and several reports tie attacker speed to AI.
What happened
Siemens patched CVE-2026-110936, a high-severity DLL sideloading flaw in Siemens Software Center. It is already exploited in ClickFix attacks to deploy a remote access trojan. The Hacker News ↗
AOMEI's update servers were reportedly compromised and used to distribute malware through the backup software's promotional feature. Users of AOMEI tools should check update logs. The summary gives no timeframe or malware family. BleepingComputer ↗
The GhostAction supply-chain attackers now phish developers, and a credential stealer disguised as a font appeared across 94 GitHub repositories. Developer credentials are the target. The Hacker News ↗
Cloudflare urges protecting NetScaler Gateway against CVE-2026-88771, a pre-authentication command execution flaw, by moving sign-in controls in front of the appliance. The advice is to reduce exposure beyond the patch. The summary does not say whether the flaw is exploited. Cloudflare Blog ↗
Krebs reports federal investigators suspect an executive at a ransom negotiation firm helped ShinyHunters run a victim extortion website, after the group stole FBI data. Separately, a Florida DMV breach linked to ShinyHunters prompted state alerts to current and former residents. Krebs on Security ↗
Ahold Delhize confirmed a cyberattack took US and European systems offline, its second security incident in two years. The summary gives no recovery timeline or data-loss details. The Register ↗
Terra reports a sharp rise in GitHub security fixes reported broken within 90 days, and attributes it to AI-assisted attackers. Incomplete patches are being found and exploited faster. The Register ↗
A study of IPsec IKEv2 post-quantum migration finds that large PQC keys cause IP fragmentation that can break security associations and degrade performance. VPN operators planning PQC rollouts should test for this. arXiv cs.CR (Cryptography & Security) ↗
Articles the model saw · 38
Attackers hijacked a contributor's GitHub account to replace five OVHcloud CLI release archives with secret-stealing malware, live for up to 94 minutes.
The Hacker Newssupply-chainmalwaregithubovhcloudFeed excerpt
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
F5 released out-of-band patches for NGINX fixing multiple flaws, including three critical vulnerabilities allowing code execution on affected systems.
BleepingComputernginxf5patchcveFeed excerpt
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. [...]
Siemens patched CVE-2026-110936, a high-severity DLL sideloading flaw in Siemens Software Center already exploited in ClickFix attacks to deploy a RAT.
The Hacker NewscveexploitedratsiemensFeed excerpt
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as the
Rank Math PRO WordPress plugin downloads from the vendor's official site carried backdoors in a supply-chain attack.
BleepingComputersupply-chainwordpressmalwareFeed excerpt
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]
Grocery chain Ahold Delhaize confirmed a cyberattack took US and European systems offline, its second security incident in two years.
The RegistercyberattackoutageretailFeed excerpt
Second security snafu in two years
Hackers reportedly compromised AOMEI's update servers to distribute malware through the backup software's promotional feature.
BleepingComputersupply-chainmalwareaomeiFeed excerpt
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]
A researcher warns attackers are chaining four Plex Media Server vulnerabilities to hack unpatched servers, urging immediate patching.
Ars TechnicaplexvulnerabilitypatchFeed excerpt
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Hackers breached OpenCode's online platform, stealing some users' API keys and running up charges on their AI accounts.
TechCrunchbreachapi-keysai-toolsopen-sourceFeed excerpt
OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
Staffing software vendor Bullhorn took its platform offline to contain a cyberattack that caused a system-wide outage.
BleepingComputercyberattackoutagebullhornFeed excerpt
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]
Attackers exploit the Plex2Shell chain of four Plex Media Server vulnerabilities to deploy crypto miners and a Linux proxy backdoor.
The Hacker NewsplexcvemalwarelinuxFeed excerpt
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities
The open-source AI coding project OpenCode disclosed a breach that exposed API keys users had stored for external AI providers.
BleepingComputerbreachapi-keysaiopen-sourceFeed excerpt
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]
A statewide Florida DMV data breach, linked to the ShinyHunters group, prompted state alerts to current and former residents.
Ars TechnicabreachshinyhuntersgovernmentFeed excerpt
Florida issues alerts after statewide DMV data breach linked to ShinyHunters.
Rank Math PRO WordPress SEO plugin copies distributed October 15-16 contained a self-restoring backdoor; affected sites should be treated as compromised.
The Hacker Newswordpresssupply-chainbackdoormalwareFeed excerpt
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the
Norforge reports an attacker used a largely autonomous AI agent army to breach over 100 websites, reportedly including John Deere and SharkNinja.
The Vergeai-agentsbreachattackFeed excerpt
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins. Concerns over AI-powered cybersecurity breaches have grown as the technology grows more advanced, with hackers using the tools to carry out large-scale attacks. At the same time, rogue AI agents are carrying out attacks of their own after escaping from testing environments. Researchers at Norforge uncovered the attacks through exposed work on Cai … Read the full story at The Verge.
Federal investigators suspect a ransom negotiation firm executive helped ShinyHunters run a victim extortion website, after the group stole FBI data.
Krebs on SecurityshinyhuntersextortionransomwarefbiFeed excerpt
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
The GhostAction supply chain attackers now phish developers and deliver a credential stealer disguised as a font across 94 GitHub repositories.
The Hacker Newssupply-chaingithubmalwarestealerFeed excerpt
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps
Cloudflare urges protecting NetScaler Gateway against CVE-2026-88771, a pre-authentication command execution flaw, by moving sign-in controls in front of it.
Cloudflare BlogcvecitrixnetscalervulnerabilityFeed excerpt
CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.
A researcher says Broadcom knew of a Wi-Fi flaw since 2018 that still lets attackers hijack routers, potentially affecting millions of devices.
The RegisterbroadcomwifiroutervulnerabilityFeed excerpt
Chip giant knew about the flaw in 2018, researcher claims, but millions of devices may still be vulnerable
Forescout researchers detail ROMULUS, a ClickFix-style malware delivery platform distributing LegionLoader and other malware via fake landing pages.
The Hacker NewsclickfixmalwareforescoutFeed excerpt
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own
Study examines IPsec IKEv2 post-quantum migration, finding large PQC keys cause IP fragmentation that can break security associations and degrade performance.
arXiv cs.CR (Cryptography & Security)pqcipsecvpnnetworkingFeed excerpt
arXiv:2610.25799v1 Announce Type: new Abstract: The threat of quantum computers breaking classical cryptographic is accelerating the adoption of quantum- resistant cryptographic algorithms. Several government agencies have set a tight time-line for upgradation of all system to support post quantum cryptographs. We study post-quantum migration of IPSec protocols and their impact on network performance. The large key lengths in Post-Quantum Cryptography (PQC) cannot fit in a single IP packet leading to IP fragmentation. This can cause failure of security associations and degrade performance of IKEv2 under poor network conditions. To tackle this problem, we study a new key- sharing mechanism for IKEv2 and evaluate its performance. Unlike current hybrid key-sharing approaches, which send the classical and quantum keys sequentially over UDP or TCP (as in RFC 9370), the new approach concatenates them into a single composite key and transport them over TCP to ensure a reliable handshake. We implement and benchmark the new composite key-sharing handshake mechanism against existing hybrid algorithms that use either UDP or TCP. Extensive experiments under various network conditions demonstra…
PhantomTac shows attackers can spoof magnetic tactile sensors on robots by altering the magnetic field with deployable tags.
arXiv cs.CR (Cryptography & Security)roboticssensorsphysical-attackFeed excerpt
arXiv:2610.26174v1 Announce Type: new Abstract: Tactile perception is crucial for precise robotic manipulation, providing an important foundation for dexterous, closed-loop force control. Among various tactile sensing techniques, magnetic tactile sensors stand out thanks to their fine-grained, three-dimensional force perception capability and strong robustness against visual occlusion. In this study, we discover a physical loophole called PhantomTac in magnetic tactile sensors. The attacker can alter the magnetic field, thus spoofing the force interpreted by magnetic tactile sensors. The attacker can stealthily deploy such an attack by simply attaching a thin (the thickness is around 0.5 mm), battery-free magnetic tag to the surface of an object. Hence, the attack tag can be easily concealed by a barcode sticker. Such an attack scheme is "deploy-and-forget" -- the attacker can deploy the tag and leave. When a robotic hand is picking up an object, it may severely damage the object. Specifically, spoofing the normal force can crush the object, whereas spoofing the shear force can lead to a loose grip, thus dropping the object. Compared with directly sabotaging the robotic hand, Phant…
Connection escrow parks outbound pod TCP connections in the kernel via eBPF until an isolated verifier approves them, targeting hostile AI agents.
arXiv cs.CR (Cryptography & Security)ebpfai-agentscontainersFeed excerpt
arXiv:2610.26501v1 Announce Type: new Abstract: AI agents in containers act by opening network connections, and the text that drives them can be hostile. Controls placed between the agent and its tools are bypassed by a child process or a direct socket, and their approval is not tied to the connection the kernel later opens. We present connection escrow: every outbound TCP connection from a supervised pod is parked inside the kernel's connect() path, before any packet exists, by a 98-instruction eBPF program on the pod's cgroup. A node interceptor attributes the held socket to its kernel socket cookie, process, executable digest, cgroup and pod identity, parks the first bytes the agent writes, and asks a verifier in a separate container with its own key. The connection is released only on a signed verdict naming that one socket cookie and destination, unexpired and unused; no verdict by the deadline resets it, and a late approval is refused. The agent is unmodified. A 36-check adversarial suite with real cgroups passes on the eBPF hold point (33 of the checks also apply, and pass, on an iptables hold point): refused connections never reach the destination; forged, rebound, replayed…
Go will reject certificate chains containing eight distrusted SPKI public keys, hardening TLS verification.
Hacker News (front page)gotlscertificatesFeed excerpt
Article URL: https://github.com/golang/go/issues/82345 Comments URL: https://news.ycombinator.com/item?id=50160877 Points: 43 # Comments: 17
Researchers at IPinfo found French supermarket refrigerators with internet-exposed controls remained vulnerable online for months.
Hacker News (front page)iotvulnerabilityfranceFeed excerpt
Article URL: https://ipinfo.io/blog/france-fridges-hack Comments URL: https://news.ycombinator.com/item?id=50159616 Points: 4 # Comments: 0
ProjectDiscovery research shows abliterated (safety-removed) LLMs can be exploited to compromise users who run them.
Hacker News (front page)llmresearchsupply-chainFeed excerpt
Article URL: https://projectdiscovery.io/research/how-abliterated-models-can-get-you-pwned Comments URL: https://news.ycombinator.com/item?id=50159245 Points: 4 # Comments: 0
Nikkei disclosed its third data breach in about a month, exposing 1.83 million personal information records.
BleepingComputerdata-breachprivacyFeed excerpt
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]
Terra reports a sharp rise in GitHub security fixes that were reported broken within 90 days, attributed to AI-assisted attackers.
The Registergithubpatchesai-securityFeed excerpt
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
The Hacker News weekly recap covers 98 zero-days, rogue AI agents, a $100M crypto theft, and 700 supermarkets hit.
The Hacker Newsweekly-recapzero-dayransomwareFeed excerpt
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were
Flare examines underground markets selling forged IDs, deepfakes, and verification services to defeat Know Your Client checks.
BleepingComputerfrauddeepfakekycFeed excerpt
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts. [...]
Reuters and The Verge report on a hacker's use of AI in cyber operations, collected in the Cairn project.
Hacker News (front page)aithreat-activityFeed excerpt
https://www.reuters.com/legal/government/how-one-hacker-used... https://www.theverge.com/ai-artificial-intelligence/1013643/... Comments URL: https://news.ycombinator.com/item?id=50152302 Points: 23 # Comments: 6
ICANN is adopting a policy to improve verification of domain name registrants after publishers flagged abuse by manga pirate sites.
The RegisterdomainsicannpiracyFeed excerpt
Publishers call for better verification of domain name registrants, and ICANN is on the job with a new policy
Paper proposes a recording-aware evaluation procedure to reduce misleading results in OT intrusion detection benchmarks.
arXiv cs.CR (Cryptography & Security)icsidsot-securityFeed excerpt
arXiv:2610.24128v1 Announce Type: new Abstract: Machine-learning-based intrusion detection systems (IDSs) for operational technology (OT) are commonly evaluated on benchmark datasets in which normal and attack data are collected in separate recordings. In such settings, high performance may reflect recording-associated differences as well as attack behavior. We introduce a recording-aware evaluation procedure that compares attack windows with background from the same recording, uses prior data for model fitting and calibration, tests temporal alignment against randomized event schedules, and reports event coverage together with alarm burden. On the ProvICS multimodal dataset, cyber modalities strongly distinguish the benign and attack recordings before the first labeled attack. Same-recording evaluation reverses the apparent modality ranking across all studied window sizes: the physical view becomes the strongest individual modality, while cyber-only fusion shows the largest difference between cross-recording and same-recording AUC, reaching 0.54. Operational analysis further shows that permissive event-overlap metrics can overstate detection when a small number of long alarm episo…
Automated Rule Mutation for Emerging Attack Variants using Infrastructure-Aware Technique Proximity2
ARMS automatically generates variant detection rules for attack techniques using a technique-proximity model.
arXiv cs.CR (Cryptography & Security)detectionthreat-huntingFeed excerpt
arXiv:2610.24162v1 Announce Type: new Abstract: Detection rules are typically crafted based on specific observations of an attack. While these rules are effective for particular attack instances, their coverage diminishes when adversaries modify their techniques, such as by employing alternative execution paths or adapting to different telemetry environments while achieving the same objective. To address this challenge, we introduce ARMS, an automated rule mutation solution that generates variant detection rules. ARMS defines a novel three-dimensional proximity space to identify techniques related to the original attack that capture structural relations, functional similarity, and environmental constraints. Rather than relying on ungrounded generation, ARMS leverages verifiable attack execution commands, which are extracted via semantic alignment with the Atomic Red Team repository, to construct a context-aware Retrieval-Augmented Generation (RAG) pipeline. We evaluated ARMS using verified, public SigmaHQ rules and successfully generated variants, demonstrating ARMS's capability to expand detection coverage. We further evaluated ARMS across multiple research questions, showing the …
SPIDES proposes information-flow control to protect browser agents from prompt injection and data exfiltration.
arXiv cs.CR (Cryptography & Security)browser-agentsprompt-injectionFeed excerpt
arXiv:2610.24277v1 Announce Type: new Abstract: Browser agents automate complex workflows by reading and acting on arbitrary page content, but this flexibility exposes them to prompt injection attacks and unintended data exfiltration. Recent work argues that LLM-driven browser agents erode traditional web security boundaries such as the Same-Origin Policy (SOP) by acting across origins with the user's authority and no built-in isolation. We argue that restoring SOP is neither sufficient (a same-origin public sink can leak private data) nor necessary (legitimate tasks require authorized cross-origin flows) for protecting the security of users. We propose SPIDES, which instead enforces information-flow control by gating primitive browser actions such as typing, clicking and navigating on labels propagated from element-level HTML confidentiality and integrity annotations. Untrusted and confidential content is masked from the agent's context, while policies block unauthorized flows, providing security guarantees against both prompt injection and data exfiltration that hold independently of the model driving the agent. To evaluate SPIDES and baseline defenses under a common threat model…
Study finds LLMs misjudge CVSS severity in bug bounty reports, with errors concentrating where narrative impact descriptions diverge from formal CVSS metrics.
arXiv cs.CR (Cryptography & Security)llmcvssbug-bountyFeed excerpt
arXiv:2610.24623v1 Announce Type: new Abstract: Bug bounty platforms receive vulnerability reports faster than vendors can triage them, and Large Language Models (LLMs) are increasingly considered for assigning the Common Vulnerability Scoring System (CVSS) severity that drives prioritization. Prior evaluations score short CVE descriptions and report accuracy, but deployment depends on how models err, not only how often. CVSS gives each metric a formal meaning that departs from how researchers describe impact in narrative reports, and model rationales suggest that errors concentrate where the two diverge; we ask whether this pattern is systematic. From 4,281 publicly disclosed reports mined from Huntr and HackerOne, we build a benchmark of 240 Huntr reports with vendor-validated CVSS vectors and evaluate eight LLMs under four prompting strategies and fine-tuning, measuring errors by severity class and score and analysing sub-vectors on individual reports. The best prompting configuration reaches only 49.58% level accuracy, ten points above always predicting the majority level, and fine-tuning a 7B model raises this to at most 56.25%, an optimistic upper bound. Errors are directiona…
Proposes SecODD, a governance framework adapting autonomous-vehicle operational design domains to limit autonomous cyber defense agent actions.
arXiv cs.CR (Cryptography & Security)socautonomous-defensegovernanceFeed excerpt
arXiv:2610.24741v1 Announce Type: new Abstract: Security operations centers are beginning to delegate detection, triage, and containment to Autonomous Cyber Defense (ACD) agents at execution time. Erroneous high-impact playbooks can disrupt critical services and create accountability gaps among deployers, SOC supervisors, vendors, managed service providers, and infrastructure providers. We propose SecODD, an execution-time governance framework for ACD that adapts the Operational Design Domain concept from autonomous-vehicle regulation to cyber autonomy. It defines the authorized scope of automated defensive actions, models when meaningful human intervention must remain possible, and specifies auditable due-care conditions through a Mitigation Safe Harbor. Four engineering requirements---tamper-evident logging, human-in-the-loop orchestration, rollback playbooks, and safe-state transition controls---are evaluated through a per-scenario audit matrix that illustrates how two ACD failure modes can be translated into pass/fail audit outcomes. The result is an evidence-oriented framework that authorizes ACD only when autonomous actions are bounded, interruptible, recoverable, and reconst…
Presents PatchAlign, an end-to-end workflow for determining whether security patches are present in stripped binaries.
arXiv cs.CR (Cryptography & Security)binary-analysispatch-analysisFeed excerpt
arXiv:2610.25071v1 Announce Type: new Abstract: Binary patch presence testing (PPT) determines whether a security fix is present in a stripped binary. Prior systems often assume that patch-relevant code is known or successfully matched. Function-level matching is brittle to compilation changes, inlining, finite model context, and missing usage context; moreover, similarity suppresses the patch-sized distinction needed for the verdict. We present PatchAlign, an end-to-end binary PPT workflow, which performs large-scale localization that maximizes recall economically, then the final verdict reasons for patch-specific evidence. PatchAlign uses instruction-aligned retrieval and caller-callee context to accurately locate patch-relevant binary code pieces, then screens the shortlist and compares target binary code with vulnerable and patched references using an LLM. Our experiments indicate that PatchAlign can precisely localize patch-relevant code and determine patch status without a target-location oracle.
Introduces query-efficient reconstruction attacks that recover biometric templates using only binary accept/reject feedback.
arXiv cs.CR (Cryptography & Security)biometricstemplate-protectionreconstruction-attackFeed excerpt
arXiv:2610.25118v1 Announce Type: new Abstract: Biometric authentication systems increasingly use privacy-preserving mechanisms to protect sensitive templates. However, the authentication interface itself may still leak information that enables reconstruction attacks. Prior attacks exploit released similarity scores, whereas more advanced systems reveal only the binary accept/reject decision. This binary feedback provides substantially less information, making template reconstruction far more challenging. In this work, we introduce query-efficient reconstruction attacks under extremely limited feedback, addressing two key limitations of prior attacks. First, we introduce the first attack that reconstructs protected biometric templates using only authentication success/failure feedback by exploiting the geometric constraints of biometric authentication. Second, we introduce distribution-aware query-efficient reconstruction methods for score-releasing systems, achieving a more realistic threat model by reducing the number of required queries by a factor of $5\times$ compared to recent prior score-based attacks. Finally, we combine these two insights by incorporating a pretrained faci…