BleepingComputer.com
"AI coding agents hijacked using AGENTS.md file in Downloads folder."
Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 25 October 2026, 2301 UTC.
Content and Source: "BleepingComputer.com."
https://www.bleepingcomputer.com/
Please check URL or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.
- October 25, 2026
- 11:49 AM
0
Open-box Beats Solo 4 headphones with a 50-hour battery are $89.99
Beats Solo 4 headphones pair custom 40mm transducers with up to 50 hours of battery life. Grab an open-box pair in Warm White for $89.99 (reg. $199.99).
- October 25, 2026
- 08:11 AM
- 0
Get a free 30-day browser security assessment from Push Security
See what your other tools miss: phishing that bypasses email security and MFA, ClickFix lures, unsanctioned AI tools, sensitive data shared through uploads and pastes, risky and malicious extensions, breached passwords, accounts with weak or missing MFA, and more.
Deployed through your MDM in under an hour, with a custom report you keep.
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.
- October 24, 2026
- 10:17 AM
- 3
Access 1,000+ skill courses for life—with new monthly additions—for just $19.97
As an evolving professional, the next skill you need might be coding. Or graphic design. Or figuring out the business side of that side project. Lifetime access to EDU Unlimited by StackSkills is currently on sale for just $19.97 (MSRP $600) through Nov. 1, giving you a huge skill course library to explore.
- October 24, 2026
- 08:12 AM
- 0
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.
- October 23, 2026
- 04:55 PM
- 0
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.
- October 23, 2026
- 02:54 PM
- 3
Microsoft: Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
- October 23, 2026
- 01:05 PM
- 0
Quest Diagnostics confirms data breach exposed patient records
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
- October 23, 2026
- 12:40 PM
- 0
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.
- October 23, 2026
- 11:38 AM
- 2
You gave your AI agent access, but who is giving it orders?
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act
- October 23, 2026
- 10:00 AM
- 0
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues.
- October 23, 2026
- 08:48 AM
- 0
Compare ChatGPT, Claude, and Gemini side by side for $59.97
ChatPlayground AI puts more than 20 top AI models in a single tab, so you can run a one-prompt and compare the answers side by side. Right now, a lifetime subscription to the Unlimited Plan is on sale for $59.97 (reg. $619).
- October 23, 2026
- 07:09 AM
- 0
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.
- October 22, 2026
- 05:25 PM
- 0
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
- October 22, 2026
- 04:22 PM
- 1
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
- October 22, 2026
- 03:12 PM
- 0
Get 2TB of cloud storage with zero-knowledge encryption for $59
Cloud storage usually comes with a monthly bill that never goes away. Google One's 2TB plan costs $9.99 a month, or about $120 every year you keep it. FileJump is a cloud storage service you pay for once, and a 2TB lifetime subscription is on sale for $59 (reg. $467).
- October 22, 2026
- 02:06 PM
- 0
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.
- October 22, 2026
- 01:18 PM
- 0
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.
- October 22, 2026
- 11:49 AM
- 0
Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical.
- October 22, 2026
- 10:02 AM
- 0
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
- October 22, 2026
- 09:09 AM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.