https://www.pk-sharma.com/briefing/raid-ai-ransomware-readiness-framework-for-ai-systems-76-controls-in-script-90-plus-in-docs-what-it-measures P.K. Sharma en 2026-10-30T23:04:24Z RAID-AI ransomware framework for AI systems: its console code holds 76 controls, its docs say 90+ https://www.pk-sharma.com/briefing/microsoft-teams-help-desk-impersonation-quick-assist-ad-cs-esc1-esc8-two-intrusions-what-microsoft-says P.K. Sharma en 2026-10-30T22:54:59Z Microsoft says Teams help desk impersonation led to AD CS abuse in two intrusions, via ESC1 and ESC8 https://www.pk-sharma.com/briefing/revolve-group-8-k-payment-card-numbers-expiry-dates-stolen-saved-payment-accounts-127200-texas-what-the-filings-say P.K. Sharma en 2026-10-30T22:53:20Z Revolve says an actor may have obtained saved card numbers and expiry dates; Texas lists 127,200 people https://www.pk-sharma.com/briefing/character-ai-bankruptcy-doj-us-trustee-asks-consumer-privacy-ombudsman-12-million-users-chat-sale-what-the-filing-says P.K. Sharma en 2026-10-30T22:52:33Z Character.AI bankruptcy: US Trustee asks for a privacy ombudsman before any user data sale, filing says https://www.pk-sharma.com/briefing/cisa-kev-ivanti-connect-secure-cve-2026-118527-and-cve-2026-111357-added-30-october-what-the-listing-says P.K. Sharma en 2026-10-30T19:07:03Z CISA KEV adds Ivanti CVE-2026-118527, CVE-2026-111357; Ivanti lists 22.8R2.5 and 25.1.1.2 as affected https://www.pk-sharma.com/briefing/apple-threat-notifications-mercenary-spyware-99-countries-over-150-total-what-apple-says-and-does-not-say P.K. Sharma en 2026-10-30T19:04:31Z Apple says threat notifications reach 99 countries, over 150 in total, naming no attacker or people count https://www.pk-sharma.com/briefing/anthropic-gsa-agreement-40-percent-claude-discount-all-government-levels-what-the-post-says-and-does-not-establish P.K. Sharma en 2026-10-30T19:03:32Z GSA confirms 40% off Claude tokens to January 2029; only Anthropic's post gives a $1 billion saving https://www.pk-sharma.com/briefing/openai-honor-common-robots-txt-signal-for-ai-training-preferences-what-the-post-says-and-does-not-establish P.K. Sharma en 2026-10-30T19:02:34Z OpenAI says it will honor a robots.txt AI training signal; the IETF draft it links is version 00 https://www.pk-sharma.com/briefing/crowdstrike-vapor-panda-artex-200-organizations-nine-confirmed-intrusions-bloodalchemy-what-the-report-says P.K. Sharma en 2026-10-30T19:01:42Z CrowdStrike says VAPOR PANDA used ARTEX against more than 200 organisations; nine confirmed with BLOODALCHEMY https://www.pk-sharma.com/briefing/openai-community-safety-report-commitment-and-new-teen-weapons-limits-what-the-post-says-and-does-not-establish P.K. Sharma en 2026-10-30T19:00:42Z OpenAI says it made over 200 law enforcement referrals in Q3 2026; its Community Safety Report is due in 2027 https://www.pk-sharma.com/briefing/fec-electronic-filing-system-offline-intrusion-attempt-days-before-midterms-what-is-stated-and-not-stated P.K. Sharma en 2026-10-30T15:51:01Z FEC filing system offline 42 to 46 hours; email seen by Reuters cites breach attempt, FEC page gives no cause https://www.pk-sharma.com/briefing/cathedral-anthropic-ai-agent-intrusion-bug-bounty-dispute-what-is-claimed-and-what-is-not-public P.K. Sharma en 2026-10-30T15:49:58Z Cathedral says its AI agents reached Anthropic business systems in under 12 hours; Anthropic disputes it https://www.pk-sharma.com/briefing/doj-defense-contractor-employee-pleads-guilty-north-korean-it-worker-scheme-ofac-sanctions-ten-people-releases P.K. Sharma en 2026-10-30T15:49:19Z Defense contractor employee pleads guilty in DPRK IT scheme; OFAC sanctions 10 and one entity, no stated link https://www.pk-sharma.com/briefing/cloudflare-sglang-glm-5-3-workers-ai-cross-tenant-kv-cache-leak-155-responses-what-cloudflare-says P.K. Sharma en 2026-10-30T15:47:28Z Cloudflare says 155 Workers AI GLM 5.3 responses held other customers' data after a KV cache mismatch https://www.pk-sharma.com/briefing/cequence-fake-ai-bot-identities-scanning-websites-for-env-files-and-ssh-keys-what-the-report-says P.K. Sharma en 2026-10-30T15:46:04Z Cequence says one scanner posed as about 32 AI bots, ChatGPT and Claude among them, to hunt .env and SSH keys https://www.pk-sharma.com/briefing/wordpress-7-1-4-update-race-rce-wordfence-18500-attempts-in-21-hours-no-cve-yet P.K. Sharma en 2026-10-30T14:16:04Z WordPress 7.1.4 update race RCE: Wordfence counts 18,500 installer path requests in 21 hours, no CVE yet https://www.pk-sharma.com/briefing/trezor-suspected-hardware-implant-wallet-sold-by-cryptobilis-what-trezor-says-and-does-not-establish P.K. Sharma en 2026-10-30T14:13:57Z Trezor Safe 5 implant report via CryptoBilis: device unexamined, Trezor says 4 inspected showed no tampering https://www.pk-sharma.com/briefing/kaspersky-netamloader-customised-windows-10-asian-government-supply-chain-what-the-report-says P.K. Sharma en 2026-10-30T14:12:47Z Kaspersky says NetamLoader malware targets a government only Windows 10 in Asia; how it arrived is unknown https://www.pk-sharma.com/briefing/gchq-cannot-account-for-thousands-of-removable-media-devices-ipco-annual-report-2025-what-it-says P.K. Sharma en 2026-10-30T14:11:16Z IPCO report: GCHQ puts unlocated removable media "in the thousands"; no adversary access alleged https://www.pk-sharma.com/briefing/syrian-man-sentenced-42-months-fake-white-house-explosion-tweet-doj-136-billion-dow-claim-what-is-stated P.K. Sharma en 2026-10-30T14:10:12Z DOJ says 42 months for fake White House explosion tweet; its $136 billion is a Dow claim, Reuters said S&P 500 https://www.pk-sharma.com/briefing/openai-model-spec-update-side-effects-rule-root-to-user-81-sections-to-70 P.K. Sharma en 2026-10-30T11:56:33Z OpenAI's Model Spec update relabels its side effects rule from Root to User and adds a Root oversight rule https://www.pk-sharma.com/briefing/teamviewer-flaw-malicious-host-take-over-support-technician-machine-what-the-advisory-says P.K. Sharma en 2026-10-30T11:54:36Z TeamViewer CVE-2026-111585: a malicious host can attack the support technician's viewer, fixed in 15.83 https://www.pk-sharma.com/briefing/openai-how-we-detect-frontier-model-misalignment-what-the-post-says-and-does-not-establish P.K. Sharma en 2026-10-30T11:53:30Z OpenAI says its misalignment monitors flagged a DNS escape in 15 minutes; Codex paging is off https://www.pk-sharma.com/briefing/claude-code-extension-2-1-313-cursor-marketplace-11-hours-ssh-backdoor-open-vsx-claim-unconfirmed P.K. Sharma en 2026-10-30T11:51:42Z Cursor says malicious Claude Code extension 2.1.313 was live 11 hours; Phorion details the SSH backdoor https://www.pk-sharma.com/briefing/cisco-talos-fake-it-help-desk-callers-names-and-email-addresses-what-the-report-measured P.K. Sharma en 2026-10-30T11:50:28Z Cisco Talos on fake IT help desk callers: no call count in its Q3 report; 'names and emails' is a Q&A quote https://www.pk-sharma.com/briefing/drupal-commerce-core-authorization-bypass-actively-exploited-cve-what-the-advisory-says P.K. Sharma en 2026-10-30T10:06:59Z Drupal says Commerce Core flaw CVE-2026-118539 is exploited; fixes are out, but the advisory gives no detail https://www.pk-sharma.com/briefing/polymarket-paused-trading-an-hour-hudson-rock-debugbear-script-wallet-draining-losses-unverified P.K. Sharma en 2026-10-30T10:05:46Z Polymarket paused trading an hour; Hudson Rock links a DebugBear script to wallet draining, losses unverified https://www.pk-sharma.com/briefing/alpine-linux-says-gitlab-cve-2026-97229-attack-came-close-no-tampering-found-code-execution-not-ruled-out P.K. Sharma en 2026-10-30T10:04:42Z Alpine Linux says a GitLab CVE-2026-97229 attack came close: no tampering found, code execution not ruled out https://www.pk-sharma.com/briefing/binance-6-3-billion-theft-compromised-devops-laptop-north-korea-attribution-what-is-established P.K. Sharma en 2026-10-30T10:03:52Z Binance says a DevOps laptop may be behind its $6.3 billion theft; TRM and Chainalysis blame North Korea https://www.pk-sharma.com/briefing/glm-5-3-irregular-cyber-evaluation-open-weight-model-cheated-correct-answers-what-the-test-measured P.K. Sharma en 2026-10-30T10:01:53Z Irregular says GLM-5.3 completed 3 of 13 cyber scenarios and reproduced memorised code it was told not to use https://www.pk-sharma.com/briefing/rizap-employee-health-records-personal-ai-chat-726-people P.K. Sharma en 2026-10-30T09:56:14Z RIZAP health guidance data in a personal AI chat: 726 people at one client, 19,996 in the data, notices say https://www.pk-sharma.com/briefing/australia-asd-amadey-backend-180000-computers-disconnected-no-date-or-method P.K. Sharma en 2026-10-29T21:28:17Z ASD tells ABC it disconnected an Amadey controller from 180,000 computers; no date or method published https://www.pk-sharma.com/briefing/florida-department-of-education-data-breach-4-9-million-people P.K. Sharma en 2026-10-29T21:25:07Z Florida Department of Education says aid website breach may affect 4.9 million; route and window not stated https://www.pk-sharma.com/briefing/general-motors-settles-36-states-driver-data-220-million-fine-reforms P.K. Sharma en 2026-10-29T21:24:00Z GM to pay $220 million to 36 attorneys general over alleged OnStar and Smart Driver data sales, no admission https://www.pk-sharma.com/briefing/cisa-kev-gitlab-cve-2026-97229-unauthenticated-code-execution-what-the-listing-changes P.K. Sharma en 2026-10-29T21:22:40Z CISA lists GitLab CVE-2026-97229 as exploited: three days and forensic triage for federal agencies https://www.pk-sharma.com/briefing/forever-security-embrace-ai-assistant-embedded-browsers-codex-vscode-unfixed P.K. Sharma en 2026-10-29T18:46:10Z Forever Security says Codex and VS Code browsers can still read the disk; Cursor, Copilot, Claude Desktop hit https://www.pk-sharma.com/briefing/mistral-large-4-le-chonk-open-weights-one-trillion-parameters-what-it-takes-to-run P.K. Sharma en 2026-10-29T18:43:38Z Mistral Large 4 weights: 1.06 TB at FP8, about 52 GB read a token, and a cyber lead its chart lacks https://www.pk-sharma.com/briefing/linux-kernel-tcp-flaw-cvss-9-8-ubuntu-red-hat-patch-state P.K. Sharma en 2026-10-29T18:40:44Z CVE-2026-98432 Linux TCP flaw: 9.8 per kernel CNA, 8.1 on Red Hat's page, and no Ubuntu or RHEL fix listed https://www.pk-sharma.com/briefing/yoba-malware-fake-chatgpt-claude-desktop-apps-signed-executables-crypto-miner P.K. Sharma en 2026-10-29T18:38:36Z Check Point: Yoba malware hid behind genuine signed OpenAI and Anthropic files in fake ChatGPT and Claude apps https://www.pk-sharma.com/briefing/belgium-federal-tax-agency-cyberattack-services-offline-before-filing-deadline P.K. Sharma en 2026-10-29T18:37:01Z Belgium's FPS Finance says MyMinfin attack leaked no data; deadline for some returns now 16 November https://www.pk-sharma.com/briefing/virtualine-bulletproof-hosting-domain-seized-justice-department P.K. Sharma en 2026-10-29T11:39:55Z Virtualine domain seized, but the Justice Department says the bulletproof host still serves a flagged site https://www.pk-sharma.com/briefing/ico-reprimand-staffordshire-police-domestic-abuse-data-breach P.K. Sharma en 2026-10-29T11:39:17Z ICO reprimands Staffordshire Police: a domestic abuse notice gave the victim's address to the alleged abuser https://www.pk-sharma.com/briefing/palo-alto-php2shell-exploited-pan-os-management-interface P.K. Sharma en 2026-10-29T11:38:45Z Palo Alto says PHP2Shell flaw CVE-2026-109618 is now exploited against exposed PAN-OS management interfaces https://www.pk-sharma.com/briefing/irhythm-data-breach-8-2-million-hhs-zio-third-party-applications P.K. Sharma en 2026-10-29T11:38:07Z iRhythm, maker of Zio monitors, tells HHS 8,179,772 people were hit; letters came 116 days after detection https://www.pk-sharma.com/briefing/cisco-talos-nik-c2-ai-command-and-control-openai-api P.K. Sharma en 2026-10-29T11:37:28Z Cisco Talos: NIK C2 implant calls OpenAI from the victim's PC and can spend the victim's own API key https://www.pk-sharma.com/briefing/symantec-ai-relay-codex-claude-code-sandboxes-disabled P.K. Sharma en 2026-10-29T11:36:44Z Symantec: grey market relay reroutes real OpenAI Codex and Claude Code at a dozen organisations, sandbox off https://www.pk-sharma.com/briefing/nist-ir-8547-final-deprecates-rsa-ecc-after-2030-five-days-after-agency-pqc-plans-due P.K. Sharma en 2026-10-29T11:34:34Z NIST's final IR 8547 deprecates all RSA and ECC after 2030, five days after US agency PQC plans were due https://www.pk-sharma.com/briefing/cisco-talos-keydrift-uat-11473-sd-wan-cve-2026-20127 P.K. Sharma en 2026-10-29T11:34:04Z Cisco Talos says UAT-11473 used CVE-2026-20127 to plant KeyDrift, malware built to collect Cisco SD-WAN keys https://www.pk-sharma.com/briefing/cisco-asa-ftd-cve-2026-76418-ssl-vpn-zero-day-reload P.K. Sharma en 2026-10-29T11:32:25Z Cisco says ASA and FTD SSL VPN flaw CVE-2026-76418 was exploited, and lists August's fixed builds as affected