Microsoft says a China-aligned group used the ARTEX AI agent to breach ConnectWise and hundreds more
A China-aligned group pointed an open-source AI agent framework at a backup vendor's app and tried 2,250 Microsoft 365 tenants at machine speed.
AI security news and fixes for the tools you run
Attacks and breaches involving AI, and fixes for flaws in the software you run, each with how to check your version and update.
16 stories · newest
Meta pauses Muse chat sharing after a security firm finds 6,800 share addresses in public DNS
Muse put each chat's title in its share address, and DNS records keep those titles searchable even now.
Anthropic offers Claude and on-site engineers to power grid defenders, plus free open-source bug scans
The open-source scanner's bug reports go out with no human reading them first, and Anthropic expects most to be right.
Does this affect you?
HighNewnpm package (body-parser)body-parser before 1.20.9 and 2.4.0: one compressed request can crash a Node.js appFixed in
2.4.01.20.9How to fix itCriticalNewPHPPHP 8.2 to 8.5: two remote code execution flaws, update nowFixed in8.2.358.3.368.4.278.5.12How to fix itHighActively exploitedNewPlex Media ServerPlex Media Server: four flaws attackers are already using, fixed in 1.43.3.10861Fixed in1.43.3.10861How to fix itCriticalNewPython package (pillow)Pillow before 13.0.0: one crafted image file can run code on your server, update nowFixed in13.0.0How to fix itRunning stories
ARTEX, the hacking agent that keeps turning up
- Oct 22Microsoft says a China-aligned group used the ARTEX AI agent to breach ConnectWise and hundreds more
- Oct 10ARTEX's author takes the AI pentesting agent closed-source after CrowdStrike tied it to Korean bank breaches
- Oct 8CrowdStrike says an attacker likely used the ARTEX AI agent against South Korean banks
Photo: Nokia621, CC BY-SA 4.0Meta's Muse agent and models
- Oct 20Meta pauses Muse chat sharing after a security firm finds 6,800 share addresses in public DNS
- Oct 15Meta releases Muse Spark Open's weights, tuned with Apple to run on two Mac Studios
- Oct 12Meta releases Muse Wonder, the models Zuckerberg says bring it to the frontier
Models in these stories
This week
Hacker jailbreaks Switch 2 through a Switch 1 BASIC game, and Codex found the first bug
The way in was a BASIC programming game from the first Switch, with agents watching both consoles over HDMI.
Anthropic says Claude proved 239 test entry points in 123 open-source libraries never crash
A fuzzer can only say it hasn't found a crash yet, and these proofs rule one out for every input in range.
Anthropic says Claude found 493 attack-surface issues in 25 open-source projects, including OpenSSH
One pair of settings had silently turned off a security check for 21 years, and OpenSSH changed its code after Claude's report.
PHP patches two critical flaws, one found with OpenAI's GPT-5.6 Sol
PHP says the attack can land before a site's own code runs, and that updating is the only safe choice.
OpenCode says a distillation attack exposed the AI provider keys of 1.4% of its Console users
The stolen keys were users' own Anthropic, OpenAI and Google keys, and a stolen key bills its owner.
Earlier in October
ARTEX's author takes the AI pentesting agent closed-source after CrowdStrike tied it to Korean bank breaches
The tool's author says the attack had nothing to do with them, and that ARTEX was built for research and authorized testing.
Anthropic merges Glasswing into a three-tier cyber program that unlocks Opus 5.5 and Mythos 5.1
In Anthropic's own test, the Red Team tier blocked nothing and Opus 5.5 finished 34 of 50 attack scenarios.
CrowdStrike says an attacker likely used the ARTEX AI agent against South Korean banks
The attacker left their Claude Code histories in an open directory, including the part where they asked Claude where to sell the data.
September 2026
Google says stolen AI accounts sell at up to 99% off, but prices more than doubled
Claude and Gemini logins are what the buyers want most, and coding tools are catching up.
One undocumented Muse setting lets local malware redirect your dictation, and Patrick Wardle shipped the exploit
Wardle told people not to install Meta's Mac agent, four days after Mark Zuckerberg announced it himself.
ZCode packaged developers' whole .git history for upload, and Z.ai open-sourced the client in response
The rule that allows .git runs ahead of every exclusion in ZCode's filter chain, so neither the 1 MB size cap nor the key filter ever touches what's inside it.
Opus 4.8 couldn't write a working exploit, but Opus 5 did it in three hours
The chain it wrote reached OpenAI employees' ChatGPT accounts, and from there a pull request in the private openai/openai repo.
Can air-gapped computers talk through CPU heat? What OpenAI's Noam Brown actually said
The headline turned an aside about academic work into a model sending Morse code across an air gap, and then Brown posted a narrower version of the claim that survives the arithmetic.
