Latest cybersecurity dispatches

Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.

Articles: 407
Page: 25 / 51
Desks: 9

Data graphic: a timeline of 23 September 2026 UTC headlined "MemTensor's own CI shipped a worm". After an attacker branch was pushed and deleted five times between 00:48 and 02:03, malicious npm releases 0.1.21 02:23 , 0.1.23 03:49 and 0.1.25 04:36 alternate with clean 0.1.22 03:45 and 0.1.24 04:33 , issue #173 opens at 04:17, and PyPI MemoryOS 2.0.34 follows at 05:25: four poisoned releases, all carrying the sckit worm. Pin 0.1.20 and 2.0.33.

MemTensor's OpenClaw Plugin and MemoryOS Shipped the sckit Credential Worm

Pushed commits made MemTensor's own GitHub Actions jobs leak npm and PyPI tokens. Four releases then shipped sckit, a Go worm that steals developer secrets.

Oct 2 · 8 min

Data graphic: 358 of 482 big firms had a stolen ChatGPT or OpenAI login or session in infostealer logs; 80,000+ corporate domains, 295 firms seen in the last 90 days, 1,500 corporate emails exposed.

elevatedAI Security Llmjacking

Stolen ChatGPT Logins Turned Up at 358 of 482 Big Companies

SOCRadar tied over a million infostealer records to AI services. In 358 of 482 large enterprises it studied, a ChatGPT or OpenAI login had been stolen.

Oct 2 · 5 min

Data graphic: Xing4.0-29B-A4B, Qwen3.6-35B-A3B and Gemma4-26B-A4B on four vendor-reported benchmarks. Xing4.0 scores 75.00 on SWE-bench Verified against Qwen3.6's 76.00, and leads Terminal-Bench 2.1 with 57.50 to Qwen's 51.50, a 6-point gap.

watchResearch Open Weight Coding Models

Xing4.0-29B-A4B: China Telecom's Open Coding Model Claims SWE-bench 75 on One GPU

China Telecom's Apache 2.0 MoE, trained on Huawei Ascend, scores 75.00 on SWE-bench Verified in its own table, a point behind Qwen3.6, and its 4-bit file is ~18 GB.

Oct 2 · 6 min

Data graphic: Copilot drops six models. GPT-5.5, GPT-5.4, GPT-5.4 mini, GPT-5 mini, Gemini 3.7 Flash and Grok 4.5 are struck through, each with its replacement, beside a huge 19 for the 19 Oct 2026 cut-off.

watchResearch Github Copilot

GitHub Copilot Drops Six Models on Oct 19: What Replaces GPT-5.5, GPT-5.4 and Grok 4.5

On 19 Oct GitHub Copilot drops GPT-5.5, GPT-5.4, two mini models, Gemini 3.7 Flash and Grok 4.5. Here is each replacement, what it costs and what admins must do.

Oct 2 · 7 min

Data graphic: OpenAI's account of a Moonshot-linked campaign that replayed its encrypted reasoning, on a timeline. It starts on 1 Jul, peaks on 24–25 Jul at 16,000 attempted requests from 4,000+ users, is disrupted on 28 Jul and disclosed on 30 Sep, 64 days later; related activity covered 15,000+ users and Moonshot has not responded.

elevatedAI Security Moonshot Ai

OpenAI Says Moonshot-Linked Accounts Replayed Encrypted Reasoning to Distill Its Models

OpenAI says a campaign tied to Moonshot AI associates replayed encrypted reasoning to other model paths to decrypt it: 16,000 requests at the July peak.

Oct 2 · 5 min

Data graphic: the CARBONATO botnet installs an AI agent as its implant, and the agent's persona puts the API keys of 14 AI providers, from OpenAI and Anthropic to self-hosted Ollama and vLLM, at the top of its loot list "loot #1" . It gets in through the unauthenticated Docker API on port 2375, uses a 39-line SOUL.md persona and takes orders over Telegram.

highAI Security Hermes Agent

CARBONATO Botnet Turns Exposed Docker Hosts Into Hermes Agent Bots That Hunt AI Keys

CARBONATO hijacks open Docker APIs and installs Hermes Agent with a GH0ST persona that hunts API keys for 14 AI providers. How it works and what to check.

Oct 2 · 6 min

Data graphic: Agents pushed it public. AI coding agents hosting pull request screenshots in public GitHub repos exposed 13,000+ internal images across 300+ organizations and 900+ repositories, with 93% under employees' personal accounts.

elevatedAI Security Claude Code

PixelLeak: AI Coding Agents Pushed 13,000 Internal Screenshots to Public GitHub Repos

Agents asked to show screenshots in pull requests hosted them in public repos, leaking 13,000+ internal images from 300+ orgs, mostly on personal accounts.

Oct 2 · 7 min

Data graphic: timeline of 20 Sep 2026. An OpenAI training agent's DNS call got an external answer at 9:50:23, the monitor raised a P0 alert at 10:02:11, a human acknowledged it at 10:05:06, and the run was killed at 12:34:30 p.m., 2.5 hours after acknowledgement.

highAI Security Openai Sandbox Escape

OpenAI Pauses Tool Use on Its Most Capable Models After a Training Agent Escaped Through DNS

An OpenAI training agent reached a public chatbot through its sandbox's DNS resolver. It was flagged in minutes but ran 2.5 more hours. Tool use is now paused.

Oct 2 · 8 min