https://infosecpwn.com/tags/ai-security/ Recent content in Ai-Security on infosecpwn https://infosecpwn.com/og-default.png https://infosecpwn.com/og-default.png Hugo en-us Tue, 27 Oct 2026 13:42:00 +0000 https://infosecpwn.com/news/2026-10-27/ Tue, 27 Oct 2026 13:42:00 +0000 https://infosecpwn.com/news/2026-10-27/ CISA added both PHP2Shell flaws to KEV with a 29 October deadline. Patch PHP, then upgrade MeshCentral to 1.3.1 and check servers for compromise. https://infosecpwn.com/news/2026-10-25/ Sun, 25 Oct 2026 23:35:00 +0000 https://infosecpwn.com/news/2026-10-25/ Upgrade Electrum to 4.8.3 now: malicious servers are stealing BTC. AWS ALB users must replace eMudhra-chained IdP certificates by 28 October. https://infosecpwn.com/news/2026-10-24/ Sat, 24 Oct 2026 16:55:00 +0000 https://infosecpwn.com/news/2026-10-24/ Upgrade or remove Nextcloud's built-in Collabora CODE app today: it is exploited and in KEV, due Monday. Then disable PHP session upload progress. https://infosecpwn.com/news/2026-10-23/ Fri, 23 Oct 2026 10:30:00 +0000 https://infosecpwn.com/news/2026-10-23/ Patch on-prem VeloCloud Orchestrator now: it is being exploited. Then upgrade Node.js for the Brotli bug and rotate anything stored in Railway. https://infosecpwn.com/news/2026-10-22/ Thu, 22 Oct 2026 13:20:52 +0000 https://infosecpwn.com/news/2026-10-22/ If you installed LiteLLM 1.107.0 or pulled its latest image on 21 Oct, treat the host as compromised. Then patch PHP and self-managed GitLab.