CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Sergiu Gatlan reports: CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware affiliates. Unauthenticated … Continue reading CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it e… Continue reading Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

Posted in Uncategorized

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)

A command injection vulnerability (CVE-2026-42271) in BerryAI’s LiteLLM open-source AI gateway is being exploited by attackers, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed by adding the flaw to its Known Exploited Vul… Continue reading LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)