https://www.cyberiack.com/en/ Cyberiack decodes cybersecurity and AI news: threats, vulnerabilities, innovations, regulation and best practices, from France and Europe. en-US https://www.cyberiack.com/en/articles/vercel-sandbox-flaw-still-unpatched-gives-ai-agents-a-way-to-leak-data/ https://www.cyberiack.com/en/articles/vercel-sandbox-flaw-still-unpatched-gives-ai-agents-a-way-to-leak-data/ Wed, 14 Oct 2026 10:39:24 GMT Frédéric LENQUETTE AI & security Startup AIR found a way to bypass Vercel Sandbox's network filtering and exfiltrate data. Vercel is still working out how to fix the flaw, which AIR says is not being exploited at this stage. https://www.cyberiack.com/en/articles/gemini-4-argon-google-opens-its-new-flagship-model-to-developers-and-businesses/ https://www.cyberiack.com/en/articles/gemini-4-argon-google-opens-its-new-flagship-model-to-developers-and-businesses/ Wed, 14 Oct 2026 10:28:57 GMT Frédéric LENQUETTE Artificial intelligence Since October 13, Gemini 4 Argon has been available via API and in Google's paid plans, at a launch price that will double on November 30. Its performance claims rest mostly on Google's own measurements. https://www.cyberiack.com/en/articles/ai-worms-on-connected-devices-anthropic-s-red-team-says-the-risk-is-near/ https://www.cyberiack.com/en/articles/ai-worms-on-connected-devices-anthropic-s-red-team-says-the-risk-is-near/ Wed, 14 Oct 2026 06:58:13 GMT Frédéric LENQUETTE AI & security In a study published October 12, two Anthropic researchers estimate that small open models could, within months, spread on their own across poorly secured connected devices. https://www.cyberiack.com/en/articles/character-ai-files-for-bankruptcy-as-disney-offers-20-million-for-some-of-its/ https://www.cyberiack.com/en/articles/character-ai-files-for-bankruptcy-as-disney-offers-20-million-for-some-of-its/ Wed, 14 Oct 2026 06:57:56 GMT Frédéric LENQUETTE Artificial intelligence Chatbot service Character.AI has filed for Chapter 11 protection in the United States. Disney's offer sets a price floor, and the platform stays open during the proceedings. https://www.cyberiack.com/en/articles/smart-glasses-edpb-demands-visible-reliable-recording-signals/ https://www.cyberiack.com/en/articles/smart-glasses-edpb-demands-visible-reliable-recording-signals/ Wed, 14 Oct 2026 06:57:37 GMT Frédéric LENQUETTE Regulation On October 13, the European Data Protection Board published a statement on smart glasses: manufacturers cannot shift their GDPR obligations onto wearers. https://www.cyberiack.com/en/articles/xbow-built-a-chrome-exploit-chain-in-six-days-using-an-openai-model/ https://www.cyberiack.com/en/articles/xbow-built-a-chrome-exploit-chain-in-six-days-using-an-openai-model/ Wed, 14 Oct 2026 06:57:28 GMT Frédéric LENQUETTE AI & security XBOW received $250,000 from Google for a chain of three Chrome vulnerabilities on Windows, found and exploited by four researchers assisted by GPT-5.6 Sol. The flaws have been patched. https://www.cyberiack.com/en/articles/ivanti-connect-secure-zero-day-exploited-one-of-the-patches-still-pending/ https://www.cyberiack.com/en/articles/ivanti-connect-secure-zero-day-exploited-one-of-the-patches-still-pending/ Tue, 13 Oct 2026 17:13:22 GMT Frédéric LENQUETTE Cybersecurity Ivanti has patched CVE-2026-104935, exploited since early October on its VPN gateways. But the attack chain also relies on a privilege escalation flaw that remains unpatched. https://www.cyberiack.com/en/articles/sap-fixes-a-10-10-flaw-in-its-cloud-sdk-for-python-in-october-patches/ https://www.cyberiack.com/en/articles/sap-fixes-a-10-10-flaw-in-its-cloud-sdk-for-python-in-october-patches/ Tue, 13 Oct 2026 17:09:42 GMT Frédéric LENQUETTE Cybersecurity In its October 13 Patch Day, SAP fixes a critical flaw in the Cloud SDK for Python that could expose OAuth2 secrets, along with three other critical vulnerabilities. https://www.cyberiack.com/en/articles/docker-hub-flaw-let-attackers-impersonate-users-and-tamper-with-their-images/ https://www.cyberiack.com/en/articles/docker-hub-flaw-let-attackers-impersonate-users-and-tamper-with-their-images/ Tue, 13 Oct 2026 17:04:34 GMT Frédéric LENQUETTE Cybersecurity Docker has fixed CVE-2026-105445: by converting an account into an organization, an attacker could act on the registry as another user. Docker found no evidence of exploitation. https://www.cyberiack.com/en/articles/apple-homeview-smart-display-won-t-be-sold-in-the-eu-for-lack-of-siri-ai/ https://www.cyberiack.com/en/articles/apple-homeview-smart-display-won-t-be-sold-in-the-eu-for-lack-of-siri-ai/ Tue, 13 Oct 2026 16:48:47 GMT Frédéric LENQUETTE Artificial intelligence Apple is launching HomeView, its smart home display, but not in the European Union: its Siri AI assistant is blocked on iPhone there, which Apple blames on the DMA. https://www.cyberiack.com/en/articles/post-quantum-germany-s-bsi-advises-against-classic-mceliece-after-a-series-of/ https://www.cyberiack.com/en/articles/post-quantum-germany-s-bsi-advises-against-classic-mceliece-after-a-series-of/ Tue, 13 Oct 2026 12:56:59 GMT Frédéric LENQUETTE Post-quantum Since August, cryptanalysis work has put Classic McEliece below its claimed security level. The BSI advises against it for new projects, though no practical attack exists to date. https://www.cyberiack.com/en/articles/windows-11-24h2-home-and-pro-security-updates-end-on-october-13/ https://www.cyberiack.com/en/articles/windows-11-24h2-home-and-pro-security-updates-end-on-october-13/ Tue, 13 Oct 2026 12:56:38 GMT Frédéric LENQUETTE Cybersecurity Microsoft ends updates for Windows 11 24H2 Home and Pro on October 13, 2026. Windows Server 2022 leaves mainstream support the same day. Here is how to check your version and migrate. https://www.cyberiack.com/en/articles/azure-maia-300-microsoft-details-its-new-in-house-chip-for-ai-agent-inference/ https://www.cyberiack.com/en/articles/azure-maia-300-microsoft-details-its-new-in-house-chip-for-ai-agent-inference/ Tue, 13 Oct 2026 12:50:02 GMT Frédéric LENQUETTE Artificial intelligence Microsoft unveiled Maia 300 on October 12, its third-generation AI chip. It targets AI agent inference, with 288 GB of HBM4 memory per chip. The announced gains were measured by Microsoft alone. https://www.cyberiack.com/en/articles/meta-muse-wonder-a-closed-frontier-model-priced-at-4-per-million-input-tokens/ https://www.cyberiack.com/en/articles/meta-muse-wonder-a-closed-frontier-model-priced-at-4-per-million-input-tokens/ Tue, 13 Oct 2026 08:59:15 GMT Frédéric LENQUETTE Artificial intelligence On October 12, Meta unveiled Muse Wonder and Muse Wonder Full, its most advanced AI models. An independent evaluation places them close to the best, but they are not open. https://www.cyberiack.com/en/articles/let-s-encrypt-to-issue-64-day-certificates-by-default-starting-february-10-2027/ https://www.cyberiack.com/en/articles/let-s-encrypt-to-issue-64-day-certificates-by-default-starting-february-10-2027/ Tue, 13 Oct 2026 08:52:04 GMT Frédéric LENQUETTE Cybersecurity Let's Encrypt is cutting the lifetime of its TLS certificates from 90 to 64 days in February 2027, then to 45 days in 2028. Testing begins October 14: now is the time to check your renewals. https://www.cyberiack.com/en/articles/critical-bricksforge-wordpress-flaw-exploited-since-october-7/ https://www.cyberiack.com/en/articles/critical-bricksforge-wordpress-flaw-exploited-since-october-7/ Tue, 13 Oct 2026 08:51:06 GMT Frédéric LENQUETTE Cybersecurity Flaw CVE-2026-85097 lets an unauthenticated attacker take over a WordPress site running Bricksforge. Patchstack has observed automated attacks. Users should update to version 3.1.8.10. https://www.cyberiack.com/en/articles/ahold-delhaize-cybersecurity-incident-disrupts-delhaize-and-albert-heijn/ https://www.cyberiack.com/en/articles/ahold-delhaize-cybersecurity-incident-disrupts-delhaize-and-albert-heijn/ Tue, 13 Oct 2026 06:26:39 GMT Frédéric LENQUETTE Cybersecurity Since October 11, Ahold Delhaize has taken part of its systems offline. Websites, apps and online orders are disrupted in Belgium, the Netherlands and the United States. https://www.cyberiack.com/en/articles/hacked-refrigeration-cert-fr-issues-alert-on-danfoss-ak-sm-and-ak-sc-controllers/ https://www.cyberiack.com/en/articles/hacked-refrigeration-cert-fr-issues-alert-on-danfoss-ak-sm-and-ak-sc-controllers/ Tue, 13 Oct 2026 06:25:55 GMT Frédéric LENQUETTE Cybersecurity After the forced defrosting of hundreds of supermarkets, CERT-FR reports numerous compromises of Danfoss controllers. Danfoss blames outdated equipment, and the Paris prosecutor's office is investigating. https://www.cyberiack.com/en/articles/cyber-resilience-act-decree-names-anssi-as-france-s-notifying-authority/ https://www.cyberiack.com/en/articles/cyber-resilience-act-decree-names-anssi-as-france-s-notifying-authority/ Tue, 13 Oct 2026 06:25:08 GMT Frédéric LENQUETTE Regulation Published in the Journal officiel on October 11, Decree No. 2026-944 gives ANSSI, France's national cybersecurity agency, the job of notifying and overseeing the bodies that will assess digital products' conformity with the CRA. https://www.cyberiack.com/en/articles/gdpr-norway-fines-microsoft-s-xandr-8-6-million-over-grindr-data/ https://www.cyberiack.com/en/articles/gdpr-norway-fines-microsoft-s-xandr-8-6-million-over-grindr-data/ Tue, 13 Oct 2026 04:44:32 GMT Frédéric LENQUETTE Regulation Norway's data protection authority, Datatilsynet, has fined Xandr, Microsoft's advertising subsidiary, NOK 92 million for processing sensitive Grindr user data without a legal basis. https://www.cyberiack.com/en/articles/gitlab-patches-critical-10-10-flaw-in-versions-19-4-2-19-3-4-and-19-2-8/ https://www.cyberiack.com/en/articles/gitlab-patches-critical-10-10-flaw-in-versions-19-4-2-19-3-4-and-19-2-8/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity On October 12, GitLab fixed 24 vulnerabilities, including CVE-2026-97229, which could allow unauthenticated code execution on the server. Self-hosted installations must be updated. https://www.cyberiack.com/en/articles/ledger-confirms-hardware-implant-in-wallet-sold-by-cryptobilis/ https://www.cyberiack.com/en/articles/ledger-confirms-hardware-implant-in-wallet-sold-by-cryptobilis/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity The crypto wallet maker found an unauthorized implant in a device sold by a Southeast Asian reseller. According to researchers, between $86 million and $93 million may have been stolen. https://www.cyberiack.com/en/articles/intermarche-u-leclerc-cyberattack-disrupts-refrigeration-in-hundreds-of/ https://www.cyberiack.com/en/articles/intermarche-u-leclerc-cyberattack-disrupts-refrigeration-in-hundreds-of/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity Overnight on October 11–12, hackers remotely altered the temperature of refrigerated display cases in supermarkets across France. The Paris prosecutor's office has opened an investigation; Danfoss, a supplier to Les Mousquetaires, was reportedly targeted. https://www.cyberiack.com/en/articles/qilin-and-settra-ransomware-exploit-palo-alto-globalprotect-flaw-cve-2026-0257/ https://www.cyberiack.com/en/articles/qilin-and-settra-ransomware-exploit-palo-alto-globalprotect-flaw-cve-2026-0257/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity The GlobalProtect vulnerability patched in May is still an entry point for ransomware. On October 11, ReliaQuest named the Qilin and Settra groups. Updating is not enough: organizations must also hunt for suspicious VPN access. https://www.cyberiack.com/en/articles/ecole-42-confirms-data-breach-that-may-affect-up-to-140-000-people/ https://www.cyberiack.com/en/articles/ecole-42-confirms-data-breach-that-may-affect-up-to-140-000-people/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity A hacker scraped École 42's internal directory using a user account with legitimate access, then put the profiles up for sale on October 9. The school filed a complaint and notified the CNIL, the French data protection authority. No passwords are believed to be involved. https://www.cyberiack.com/en/articles/co-founder-of-ransom-negotiator-cypfer-arrested-in-the-us-on-extortion-charges/ https://www.cyberiack.com/en/articles/co-founder-of-ransom-negotiator-cypfer-arrested-in-the-us-on-extortion-charges/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity Edward Dubrovsky, co-founder of CYPFER, a firm that negotiates with ransomware operators, was arrested on October 8 in Pennsylvania. The press links the case to the ShinyHunters group, but the FBI has not confirmed it. https://www.cyberiack.com/en/articles/qilin-ransomware-suspect-arrested-in-japan-and-handed-over-to-germany/ https://www.cyberiack.com/en/articles/qilin-ransomware-suspect-arrested-in-japan-and-handed-over-to-germany/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity A 28-year-old Russian suspected of being a leader of the Qilin ransomware group was arrested in Japan and transferred to Germany, authorities in North Rhine-Westphalia announced on October 7. https://www.cyberiack.com/en/articles/fake-claude-pages-a-google-ad-hijacks-bing-to-trap-mac-users/ https://www.cyberiack.com/en/articles/fake-claude-pages-a-google-ad-hijacks-bing-to-trap-mac-users/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE AI & security Push Security spotted an "Adception" campaign: a Google ad displaying bing.com leads to a fake Claude install page that tricks macOS users into running a malicious command. https://www.cyberiack.com/en/articles/post-quantum-us-gao-and-europol-urge-faster-migration/ https://www.cyberiack.com/en/articles/post-quantum-us-gao-and-europol-urge-faster-migration/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Post-quantum On October 6 and 7, the audit body of the US Congress and Europol published reports urging organizations to prepare for the transition to post-quantum cryptography. https://www.cyberiack.com/en/articles/infogreffe-hacker-claims-3-7-million-rows-nothing-confirmed/ https://www.cyberiack.com/en/articles/infogreffe-hacker-claims-3-7-million-rows-nothing-confirmed/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity A hacker has claimed since October 10 to have breached Infogreffe. The organization acknowledges a "minor" incident on a platform still in development. The published sample is far more limited than the announcement. https://www.cyberiack.com/en/articles/ahsaycbs-two-flaws-exploited-latest-version-still-vulnerable-huntress-says/ https://www.cyberiack.com/en/articles/ahsaycbs-two-flaws-exploited-latest-version-still-vulnerable-huntress-says/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity Since October 7, hackers have been exploiting two vulnerabilities in the AhsayCBS backup server. Version 10.3.4.0 did not fix them: Ahsay is urging customers to install patch 10.3.4.45. https://www.cyberiack.com/en/articles/netscaler-citrix-patches-new-critical-saml-related-flaw-cve-2026-107406/ https://www.cyberiack.com/en/articles/netscaler-citrix-patches-new-critical-saml-related-flaw-cve-2026-107406/ Mon, 12 Oct 2026 20:21:46 GMT Frédéric LENQUETTE Cybersecurity On October 8, Citrix released a patch for CVE-2026-107406, a flaw rated 9.5 out of 10 that affects NetScaler ADC and Gateway in SAML configurations. Citrix is not aware of any exploitation at this stage. https://www.cyberiack.com/en/articles/anthropic-cuts-internet-access-to-its-evaluations-after-claude-took-unplanned/ https://www.cyberiack.com/en/articles/anthropic-cuts-internet-access-to-its-evaluations-after-claude-took-unplanned/ Mon, 12 Oct 2026 08:37:30 GMT Frédéric LENQUETTE AI & security In an October 9 report, Anthropic describes cases where its models acted on real websites: forms submitted, protections bypassed, a fake tip sent to a US police department. It is cutting Internet access for all internal evaluations. https://www.cyberiack.com/en/articles/france-travail-investigates-claimed-leak-of-62-848-staff-records/ https://www.cyberiack.com/en/articles/france-travail-investigates-claimed-leak-of-62-848-staff-records/ Sun, 11 Oct 2026 18:33:56 GMT Frédéric LENQUETTE Cybersecurity A hacker claims to be selling a database of 62,848 records of France Travail agents and partners. The agency has not confirmed the breach and says it is carrying out the necessary checks. The risk of targeted phishing is real. https://www.cyberiack.com/en/articles/post-quantum-certificates-cloudflare-wants-to-become-a-certificate-authority/ https://www.cyberiack.com/en/articles/post-quantum-certificates-cloudflare-wants-to-become-a-certificate-authority/ Sun, 11 Oct 2026 18:32:53 GMT Frédéric LENQUETTE Post-quantum Cloudflare announced on September 29 that it wants to become a public certificate authority, with Merkle Tree Certificates designed for post-quantum signatures. The first Merkle Tree Certificates are expected in early 2027. https://www.cyberiack.com/en/articles/post-quantum-migration-where-to-start-a-6-step-guide/ https://www.cyberiack.com/en/articles/post-quantum-migration-where-to-start-a-6-step-guide/ Sun, 11 Oct 2026 18:32:53 GMT Frédéric LENQUETTE Post-quantum Inventory, data lifetime, quick wins on TLS and SSH, vendors, procurement, crypto-agility: a practical method for starting your migration to post-quantum cryptography. https://www.cyberiack.com/en/articles/post-quantum-what-anssi-actually-recommends-and-what-it-didn-t-say/ https://www.cyberiack.com/en/articles/post-quantum-what-anssi-actually-recommends-and-what-it-didn-t-say/ Sun, 11 Oct 2026 18:32:53 GMT Frédéric LENQUETTE Post-quantum No, ANSSI is not banning RSA in 2027. Hybridization, product qualification, purchases after 2030, inventory: what the agency's FAQ and official publications say precisely about the post-quantum migration. https://www.cyberiack.com/en/articles/post-quantum-cryptography-where-things-stand-in-october-2026/ https://www.cyberiack.com/en/articles/post-quantum-cryptography-where-things-stand-in-october-2026/ Sun, 11 Oct 2026 18:32:53 GMT Frédéric LENQUETTE Post-quantum Standards published, protocols switching over, European and French timelines, a reassessed threat: a full update on post-quantum cryptography, backed by official sources. https://www.cyberiack.com/en/articles/south-korean-banks-hacked-attacker-used-ai-tool-artex-and-claude-code/ https://www.cyberiack.com/en/articles/south-korean-banks-hacked-attacker-used-ai-tool-artex-and-claude-code/ Sun, 11 Oct 2026 18:13:12 GMT Frédéric LENQUETTE AI & security According to CrowdStrike, a likely Chinese-speaking hacker attacked South Korean banks in late September using ARTEX, a penetration-testing tool driven by AI agents, along with several language models. https://www.cyberiack.com/en/articles/aws-agentcore-a-single-request-was-enough-to-hijack-ai-agents-zenity-says/ https://www.cyberiack.com/en/articles/aws-agentcore-a-single-request-was-enough-to-hijack-ai-agents-zenity-says/ Sun, 11 Oct 2026 18:09:47 GMT Frédéric LENQUETTE AI & security Zenity showed that a single request sent to a public Amazon Bedrock AgentCore agent could reach other agents and their secrets. AWS disputes that this is a vulnerability. https://www.cyberiack.com/en/articles/ransomware-cripples-japan-s-idcf-cloud-hitting-495-customers-including-local/ https://www.cyberiack.com/en/articles/ransomware-cripples-japan-s-idcf-cloud-hitting-495-customers-including-local/ Sun, 11 Oct 2026 18:09:47 GMT Frédéric LENQUETTE Cybersecurity IDC Frontier, a SoftBank subsidiary, confirmed that a ransomware attack took down one region of its IDCF Cloud on October 7, affecting 495 businesses and local authorities. https://www.cyberiack.com/en/articles/windows-update-certificates-change-pcs-that-aren-t-updated-will-lose-patches-in/ https://www.cyberiack.com/en/articles/windows-update-certificates-change-pcs-that-aren-t-updated-will-lose-patches-in/ Sun, 11 Oct 2026 18:06:44 GMT Frédéric LENQUETTE Cybersecurity Microsoft warns that Windows Update certificates expire on May 17 and June 19, 2027. PCs and servers not updated by then will no longer receive any security updates. https://www.cyberiack.com/en/articles/mistral-large-4-france-s-ai-champion-bets-on-open-weights-and-cybersecurity/ https://www.cyberiack.com/en/articles/mistral-large-4-france-s-ai-champion-bets-on-open-weights-and-cybersecurity/ Sun, 11 Oct 2026 18:06:44 GMT Frédéric LENQUETTE Artificial intelligence Mistral AI unveiled Mistral Large 4 on October 6, a multimodal model whose weights will be released on October 27. The startup is stressing cybersecurity and sovereignty to regain ground against American and Chinese giants. https://www.cyberiack.com/en/articles/nis2-france-s-resilience-bill-postponed-again-in-the-national-assembly/ https://www.cyberiack.com/en/articles/nis2-france-s-resilience-bill-postponed-again-in-the-national-assembly/ Sun, 11 Oct 2026 18:05:22 GMT Frédéric LENQUETTE Regulation The floor debate on the "Resilience" bill, which transposes NIS2, scheduled for October 7, was removed from the agenda. France, already taken to the EU Court of Justice, is nearly two years behind schedule. https://www.cyberiack.com/en/articles/caf-confirms-data-breach-affecting-vacaf-vacation-aid-beneficiaries/ https://www.cyberiack.com/en/articles/caf-confirms-data-breach-affecting-vacaf-vacation-aid-beneficiaries/ Sun, 11 Oct 2026 18:05:22 GMT Frédéric LENQUETTE Cybersecurity France's national family allowance fund (Cnaf) has confirmed a "cybersecurity incident" at Vacaf, the CAF vacation aid program. Bank details and passwords reportedly are not affected, but beneficiaries should stay alert to scams. https://www.cyberiack.com/en/articles/sonicwall-sma1000-critical-flaw-cve-2026-102255-already-targeted-in-attacks/ https://www.cyberiack.com/en/articles/sonicwall-sma1000-critical-flaw-cve-2026-102255-already-targeted-in-attacks/ Sun, 11 Oct 2026 18:01:54 GMT Frédéric LENQUETTE Cybersecurity Patched on October 6, a maximum-severity flaw in SonicWall SMA1000 remote access gateways is already the target of exploitation attempts. Administrators should apply the patch without delay. https://www.cyberiack.com/en/articles/citrix-netscaler-zero-days-exploited-as-cisa-urges-immediate-patching/ https://www.cyberiack.com/en/articles/citrix-netscaler-zero-days-exploited-as-cisa-urges-immediate-patching/ Sun, 11 Oct 2026 18:01:54 GMT Frédéric LENQUETTE Cybersecurity Two critical NetScaler ADC and Gateway vulnerabilities allow remote code execution and are being exploited worldwide. CISA's alert, updated on October 9, now covers ten CVEs. https://www.cyberiack.com/en/articles/fortimail-critical-flaw-exploited-before-a-patch-was-available-cve-2026-104286/ https://www.cyberiack.com/en/articles/fortimail-critical-flaw-exploited-before-a-patch-was-available-cve-2026-104286/ Sun, 11 Oct 2026 18:01:54 GMT Frédéric LENQUETTE Cybersecurity Fortinet warns of a FortiMail flaw rated 9.8/10 that was exploited before any patch existed. Fixed versions are now available on all maintained branches. Here are the affected branches, the workaround to apply and the indicators of compromise. https://www.cyberiack.com/en/articles/welcome-to-cyberiack/ https://www.cyberiack.com/en/articles/welcome-to-cyberiack/ Sun, 11 Oct 2026 14:36:27 GMT Frédéric LENQUETTE Cybersecurity Every day, Cyberiack breaks down the news in cybersecurity and artificial intelligence, where the two worlds meet. https://www.cyberiack.com/en/articles/prompt-injection-understanding-the-1-vulnerability-in-llm-applications/ https://www.cyberiack.com/en/articles/prompt-injection-understanding-the-1-vulnerability-in-llm-applications/ Sun, 11 Oct 2026 13:36:27 GMT Frédéric LENQUETTE AI & security Applications built on large language models can be hijacked by instructions hidden in the data they process. Here is how the attack works and how to defend against it.