One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials
A single prompt sent to a public-facing AI agent could have exposed every Amazon Bedrock AgentCore agent in the same AWS account and region, according…
Month: October 2026
AI Is Getting Really Good at Messing With Cybercriminals
Welcome to Kernel Panic!, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To…
Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military Conflict
A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion passive DNS observations within days. Published October 9, 2026,…
FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe
FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs portal breach. A co-founder of Canadian ransomware…
Thousands of wind and solar park systems sit exposed on the internet across Europe
Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the…
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn’t
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single…
Mastercard commits to offline payment capability in uncertain world
Mastercard is enabling offline payments for all its cards early next year to keep money moving during power and network outages in Europe. The payments…
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company. The…
Opinion | Better protection needed as violent cryptocurrency robberies surge
Cryptocurrency’s promise of financial freedom carries a cost the industry must confront: growing wealth can make its owners more attractive targets for violent criminals. Protecting…
Exposed Nvidia GPU monitors can reveal AI infrastructure secrets
When publicly accessible without authentication, these endpoints could reveal a lot about an organization’s computing infrastructure, Lava says. The systems that were found exposed included…
FBI, Secret Service urge critical infrastructure operators to secure Fortinet gateways against FortiBleed attacks
The Federal Bureau of Investigation (FBI) and the U.S. Secret Service (USSS) warned that the FortiBleed credential-compromise campaign continues to target internet-facing Fortinet FortiGate firewalls…
Deno is joining Cloudflare | Cloudflare Blog
This may come as a surprise to some, but when the Deno team released celld in August, we were delighted. Why a surprise? Well, as…