SecurityWeek

A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.

Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.

Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.

The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.

The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.

Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks.

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.