Posts of last few hours

🏴‍☠️ N0n has just published a new victim : Hunter Neurology
Healthcare - Neurology (AU) · New South Wales, Australia | Patient records of an Australian neurology practice: 15,252 patient images and scans, 11,819 patient letters and reports, 439 laboratory results and 839 patient records system files; Four complete weekly backups of the practice medical records system; Protected health information including patient names, dates of birth and clinical data | [NOT PAID — EXPOSED]
https://www.ransomware.live/id/SHVudGVyIE5ldXJvbG9neUBOMG4=
IAD France Dataset Leak Claim Includes 112,780 Property Records and 8,592 Agent Profiles
An actor using the handle "Feel" claims to have leaked data associated with IAD France, a French real estate network supporting property buying, selling and rental activity.
https://darkwebinformer.com/iad-france-dataset-leak-claim-includes-112-780-property-records-and-8-592-agent-profiles/
G.O.S.S.I.P 阅读推荐 2026-10-13 看节点，还是看交互？ ProvFusion 的多视角溯源入侵检测
https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247502285&idx=1&sn=be31d6d7d41b04c3efa90fb276f8b7b4
ИИ научился доставать картинки прямо из вашего мозга. Достаточно снимков МРТ
Новая модель лучше прежних методов сохраняет форму, цвет и положение объектов.
https://www.securitylab.ru/news/578657.php
When LLM Gateways Go Wrong: Findings from LiteLLM

TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the […]

The post When LLM Gateways Go Wrong: Findings from LiteLLM appeared first on Check Point Research.

https://research.checkpoint.com/2026/when-llm-gateways-go-wrong-findings-from-litellm/
Anthropic Shows How Small AI Models Could Replicate Across IoT Devices
Anthropic researchers show how small AI models could autonomously replicate across IoT devices, raising concerns about adaptive, AI-powered botnets. Anthropic published a paper this week that should make anyone who manages IoT infrastructure sit down for a moment. The research shows that small AI models are approaching the capability to replicate themselves autonomously across networks […]
https://securityaffairs.com/200880/ai/anthropic-shows-how-small-ai-models-could-replicate-across-iot-devices.html
🏴‍☠️ Qilin has just published a new victim : Milstein Siegel, LLC
N/A
https://www.ransomware.live/id/TWlsc3RlaW4gU2llZ2VsLCBMTENAcWlsaW4=
活动预告｜智能化软件开发微访谈·第四十五期：面向AI4S的智能化软件平台及应用
活动时间：2026年10月16日（周五）21:30-23:00
https://mp.weixin.qq.com/s?__biz=MzU4NDU4OTM4OQ==&mid=2247517729&idx=1&sn=53555d4aa2d23453f01885e8a1b302f6
🏴‍☠️ Qilin has just published a new victim : Comisión Municipal de Agua Potable y Alcantarillado de Victoria
N/A
https://www.ransomware.live/id/Q29taXNpw7NuIE11bmljaXBhbCBkZSBBZ3VhIFBvdGFibGUgeSBBbGNhbnRhcmlsbGFkbyBkZSBWaWN0b3JpYUBxaWxpbg==
SerpApi Expands Beyond Search Results with New Extract API
New API enables developers to extract structured content, discover website pages, and perform bounded crawling, all within the SerpApi workflow
https://hackread.com/serpapi-expands-search-results-new-extract-api/
The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how organizations can close these authentication gaps. [...]
https://www.bleepingcomputer.com/news/security/the-mfa-gaps-attackers-are-still-exploiting/
云SaaS环境AI安全红队攻防实战
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497290&idx=1&sn=5eca1f42b8fb62841c51139e7bf08d3e
European Retail Firms Confirm Cyber Incidents
Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims
https://www.infosecurity-magazine.com/news/retail-firms-confirm-cyber/
Советский «Луноход-2» держал планку десятилетиями — Perseverance её перешагнул
Марсоход обошёл и лунные рекорды прошлого.
https://www.securitylab.ru/news/578651.php
🏴‍☠️ Direwolf has just published a new victim : Interseguro
Insurance
https://www.ransomware.live/id/SW50ZXJzZWd1cm9AZGlyZXdvbGY=
SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/
苹果给 Siri 做了一块能认出全家人的屏幕，售价 299 美元
屏幕属于全家，个人化的 Siri 仍然要认人、认手机。
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653114746&idx=1&sn=f2ee79a0ea88f41cc77aaeea552e6633
GitLab Patches Max-Severity Vulnerability CVE-2026-97229
GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and […]
https://securityaffairs.com/200868/security/gitlab-patches-max-severity-vulnerability-cve-2026-97229.html
JetBrains security advisory (AV26-1032)
https://cyber.gc.ca/en/alerts-advisories/jetbrains-security-advisory-av26-1032
Progress security advisory (AV26-1031)
https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1031

Managed ad