The agency added both PHP flaws to its Known Exploited Vulnerabilities catalogue on 26 October 2026, a week after saying it had seen no successful exploitation, and gave federal civilian agencies until 29 October to act.
A compromised release pipeline put a poisoned LiteLLM build on PyPI and Docker for under three hours on 21 October 2026. It harvested cloud secrets, AI provider API keys and SSH keys, and Wiz says the attackers were spending stolen AWS credentials about four and a half hours later.
The two critical PHP engine flaws known as PHP2Shell have drawn botnet traffic, a working ASLR bypass and an attacker toolkit left publicly browsable, yet no vendor has reported a successful in-the-wild compromise as of 23 October 2026.
A command injection flaw in the SiteGuard Server Edition web application firewall, CVE-2026-106931, is being exploited to run commands as root or SYSTEM. JPCERT/CC alerted users on 14 October 2026 and the vendor told support customers on 29 September.
A critical flaw in BeyondTrust Remote Support appliances, CVE-2026-102764, was exploited as a zero-day in late August 2026 by a suspected PRC-nexus espionage actor that Google tracks as ARMORY CASTLE. BeyondTrust patched its SaaS tenants on 9 October and disclosed the vulnerability on 15 October. Self-hosted customers have to apply the patch themselves.
Ivanti disclosed CVE-2026-104935 on 13 October 2026 and CISA added it to the Known Exploited Vulnerabilities catalogue the same day. Volexity found an attacker running commands as root on a fully patched VPN gateway from 3 October.
A joint advisory led by the FBI describes MicroScan, a Python web application holding more than 1,300 penetration-testing scripts that China-linked actors have used since at least 2017. CISA added five of the eight named flaws to its exploited-vulnerability catalogue with a federal deadline that expired on 11 October.
The FBI says the breach of its job applicant portal followed a third party's failure to install a security patch, and has removed the contractor responsible. Reuters, citing two unnamed sources, identified the contractor as working for Accenture and the platform as Oracle PeopleSoft.
Epic Systems, whose software holds records for 325 million patients, has paused most product development to patch security flaws surfaced by Anthropic's cybersecurity model Mythos. The company's chief security officer told the New York Times, in a report published on 30 September 2026, that certain customer configurations could let outsiders read records without the access being written to the software's logs.
Regulation (EU) 2026/1744, in force from 27 July 2026, pushed the AI Act's Annex III high-risk obligations to 2 December 2027 and embedded-product rules to 2 August 2028. From 2 August 2026 the AI Office and national authorities enforce transparency duties with fines up to €15 million or 3% of turnover, and new bans on non-consensual intimate imagery apply from 2 December 2026.
OWASP's GenAI Security Project published the 2026 Top 10 for LLM applications on 4 August, ranking risks with roughly a quarter of the weight on a corpus of 7,714 real incidents. Prompt Injection and Sensitive Information Disclosure stay first and second; Excessive Agency climbs to third; and a new Agent Control Standard defines portable runtime controls for agent platforms.
Agent security is the set of controls that govern what AI agents can access and do: identity, permissions, input validation, monitoring and containment for systems that take actions with tools.