WordPress CVE-2026-119977 is a TOCTOU race in full-package core upgrades: predictable staging paths let unauthenticated attackers run code during the window. Fixed in 7.1.4; CISA KEV due date is 6 Nov 2026.

IBM’s bulletin lists two unauthenticated CVSS 9.8 flaws in Langflow 1.0.0 to 1.12.8. The fix, 1.13.0, also turns off automatic login, so the upgrade is an identity job as much as a patch.

Chainalysis says an attacker using “offensive agentic techniques” reached its systems and accessed customer names, emails, user IDs and role labels. No passwords or session tokens, but a precise list of who does what.

For about 11 hours on 29 October, Cursor’s extension marketplace served tampered Claude Code builds 2.1.312 and 2.1.313 that planted an SSH key, persistence and a beacon on up to 5,000 developer machines.

Pluto Security tracked 31 malicious Hugging Face repositories posing as small Qwen2 models. One flag, trust_remote_code, ran the attacker’s Python on GPU hosts, and a second wave returned within days of takedown.

Cequence’s CQ Prime Research tracked one scanner posing as about 32 AI bots, from OpenAI to Anthropic, while hunting .env files, cloud credentials and SSH keys. A bot’s name in a header proves nothing.

DreamHost reset passwords for some email and FTP/SFTP users after an undisclosed incident, and told account owners to check mail forwarding. A reset closes the front door; a forwarding rule can survive it.

Seoul police say a seven-person ring used generative AI and an autonomous AI pentest tool to breach about 90 Korean organisations, steal 8.2 million records and pressure 38 victims with threatening emails, calls and texts.

Forever Security found a malicious AGENTS.md in a customer’s Downloads folder that steered an AI coding agent towards a known-malicious npm package, and showed the trick working against both Codex and Claude Code.

LiteLLM says an attacker likely took developers’ GitHub CLI tokens from its own AI gateway’s logs, then used them to override branch protection and publish malware-laden litellm 1.107.0 to PyPI and Docker.