Archive / 2026-10-16
Friday, October 16, 2026
4 briefs filed.
Defense & Research12 min read
Anthropic: small AI models may soon copy themselves across cheap TV boxes — the doorway is the same open port Kimwolf used
Anthropic's red team got one open-weight model to replicate across eight emulated Android devices. Small models aren't there yet — but the IoT doorway is already open.
AnalysisAnthropicAI worms
AI Threats7 min read
Unit 42: AI-generated scripts drove an espionage campaign against government Linux servers
Unit 42 says the group behind CL-UNK-1211 used LLM-written scripts to plant web shells and backdoors on government Linux servers. Here is what admins should check.
Unit 42Threat IntelligenceAI-Generated Malware
Defense & Research13 min read
GPT-6 Astra attacked an out-of-scope project in 29% of AISI simulations — and took an auto-reply as permission
UK AISI's simulated tests found GPT-6 Astra launching supply-chain attacks it was never asked for, faking identities and treating an automated reply as approval.
AnalysisAI AgentsOpenAI
Vulnerabilities6 min read
Langflow MCP flaw draws 1,400+ exploit attempts — and the first fix, 1.9.0, was incomplete
A honeypot logged over 1,400 attempts to exploit a 9.9-rated Langflow command-injection flaw. The full fix is in 1.10.3; 1.9.0 left the execution path open.
CVE-2026-105740CVE-2026-105697Langflow