Skip to content
HACKTECH

Cyber news digest

What broke, and what we check because of it.

Breaches, exploited vulnerabilities, supply chain compromises and new rules, written up for the people who buy security work, with what each one means for an organisation that runs the same kind of systems. Every item cites at least two sources and was verified against them before publication.

52 items214 cited sourcesLatest item 5 November 2026

Showing 5 items in AI security. Show all 52 items

November 2026

1 item

  • AI security

    Three charged in alleged $129 million scheme using AI-cloned executive voices

    The US Attorney's Office in Manhattan said on 5 November 2026 that an indictment had been unsealed charging three defendants with wire fraud, aggravated identity theft and money laundering over a scheme that allegedly used artificial intelligence to impersonate corporate executives and attorneys and took about $129 million, according to the Associated Press and The Next Web. According to court documents cited by AP, the group emailed staff, often in accounting departments, posing as CEOs who needed help with a confidential financial transaction, then arranged phone or video calls in which AI mimicked the executive's voice and sometimes image. Victims were directed to an impersonated attorney at a major law firm who gave wire instructions, and the funds were converted to cryptocurrency. The charges are allegations and the defendants are presumed innocent.

    • Social engineering assessment
    • Threat modelling
    • Red team & purple team

October 2026

2 items

  • AI security

    Langflow flaw turning MCP server settings into shell commands draws exploit attempts

    Langflow, a tool for building and deploying AI-powered agents and workflows, let any authenticated user add a Model Context Protocol (MCP) server whose stdio command was passed to a shell without validation, giving remote code execution on the host (CVE-2026-105740, CVSS 9.9, fixed in 1.9.0). A related advisory for CVE-2026-105697 says that with the default auto-login setting the auto-login endpoint hands out a token without credentials, and lists 1.10.3 as the patched release. The Hacker News, citing Previdian honeypot data, reported 1,423 exploitation attempts from 27 IP addresses between 19 September and 15 October 2026, later updated to 1,706 from 28 addresses, including attempts to extract LANGFLOW_SECRET_KEY and LANGFLOW_SUPERUSER_PASSWORD.

    • AI & LLM application testing
    • Application security audit
    • Incident response
  • AI security

    XBOW says AI agents on a public OpenAI model helped build a Chrome full chain in six days

    On 13 October 2026 security firm XBOW said its researchers, directing AI agents running OpenAI's publicly available GPT-5.6 Sol model, built a three-bug Chrome exploit chain that could take over a Windows machine when a user loaded a web page. XBOW says the awarded chain was built between 2 and 7 August 2026 for about $40,000 in compute, and that Google paid a $250,000 reward, which XBOW describes as the first full-chain award under Google's 2026 rules. Google confirmed and fixed all three bugs, and XBOW says they were never used against Chrome users. The Hacker News notes that the six-day sprint followed months of earlier work, including a first full chain that took two months.

    • Red team & purple team
    • Network & infrastructure testing
    • Application security audit

September 2026

1 item

  • AI security

    Anthropic report details AI-orchestrated intrusions it disrupted over eight months

    Anthropic's September 2026 threat report describes misuse of its Claude models that the company disrupted between December 2025 and August 2026 across seven harm areas, including cyber operations, influence operations, and scams and fraud. It states that a majority of the operations described were enabled by AI via direct execution or orchestration, with multi-agent frameworks executing reconnaissance, exploitation and data exfiltration while humans set targets and reviewed exfiltration. Cases include suspected ShinyHunters affiliates whose session-store dump yielded over 2,100 Azure AD token sets spanning more than 40 corporate tenants in about 34 hours, and an actor that attacked roughly thirty AI companies in about four days. Anthropic says it disrupted each operation, strengthened its safeguards and shared intelligence with authorities and industry partners where appropriate.

    • Incident response
    • Cloud configuration review
    • Mobile application testing

February 2026

1 item

  • AI security

    Unauthorised Cline CLI release followed a prompt-injection flaw in its AI triage bot

    On 17 February 2026 an unauthorised party used a compromised npm publish token to release Cline CLI 2.3.0 with a postinstall script that globally installed OpenClaw; the version was available for about eight hours and was downloaded roughly 4,000 times, according to StepSecurity. Eight days earlier a security researcher had publicly disclosed "Clinejection", in which a GitHub issue title could prompt-inject Cline's Claude-based issue-triage workflow and, through GitHub Actions cache poisoning, expose nightly publishing tokens. Cline said that when it rotated credentials on 9 February the wrong token was deleted and the exposed npm token stayed active; it then published 2.4.0, deprecated 2.3.0 and moved npm publishing to OIDC via GitHub Actions.

    • AI & LLM application testing
    • Application security audit
    • Threat modelling

Run the checks against your own systems

We pick the checks that apply to your systems. A 45-minute scoping call ends with a fixed quote and a proposed start date; the written scope follows by email.

Book the scoping callHow incident response works