ข่าวอัปเดตทุกวัน

ข่าวความปลอดภัยทางไซเบอร์
ที่กำกับดูแลตั้งแต่การออกแบบ

บทความรายวันเกี่ยวกับช่องโหว่ การละเมิดข้อมูล และเทคนิคการโจมตีที่กำลังกำหนดทิศทางของ AI ในองค์กร และจุดที่การกำกับดูแล AI หยุดยั้งสิ่งเหล่านี้ก่อนเข้าสู่ระบบใช้งานจริง

บทความเผยแพร่เป็นภาษาอังกฤษ

ข่าวเก่ากว่า · หน้า 3 จาก 7
Vulnerability ManagementAI Governance

Microsoft's October Patch Tuesday Fixed a Record 1,411 Flaws, and Teams Are Reaching for AI Agents to Keep Up

Microsoft's October 2026 Patch Tuesday fixed a record 1,411 flaws, including one exploited Windows Shell zero-day. The three zero-days, the Critical bugs worth checking first, and how to govern AI-assisted patch triage.

14 ตุลาคม 2569·4 min read
Incident ResponseThreat Intelligence

Attackers Remotely Defrosted Refrigerators at Hundreds of French Supermarkets, and the Exposed Danfoss Controllers Were Searchable Online

Attackers hijacked Danfoss refrigeration controllers and triggered defrost cycles at French supermarket chains. What is known, the two CVEs researchers flagged, how many devices are exposed, and what operators should check.

13 ตุลาคม 2569·4 min read
Vulnerability ManagementIncident Response

Two Citrix NetScaler Zero-Days Were Probed for Five Weeks Before Anyone Got a Patch, and Updating Does Not Remove the Web Shell

Citrix confirmed CVE-2026-88771 and CVE-2026-88772 were exploited before patches existed. Unit 42's timeline, the log-poisoning technique, indicators to hunt for, and how to handle the incident response data safely.

12 ตุลาคม 2569·4 min read
Data BreachIdentity Security

Times Car Confirms 6.6 Million Accounts Were Stolen, Including Driver's License Images Customers Uploaded to Prove Who They Were

Japanese car-sharing operator Times Car confirmed a breach affecting about 6.6 million accounts, including identity-verification documents. What was taken, what the timeline shows, and what to do after a breach.

11 ตุลาคม 2569·4 min read
Vulnerability ManagementThreat Intelligence

Cisco Says Attackers Were Already Exploiting a CVSS 9.8 Login Bypass in SD-WAN Manager Before the Patch Existed, and There Is No Workaround

Cisco confirmed CVE-2026-76504, a CVSS 9.8 authentication bypass in Catalyst SD-WAN Manager, was exploited before fixes shipped. Fixed releases, log indicators to hunt for, and what to check.

10 ตุลาคม 2569·4 min read
Supply Chain SecurityMalware

The FakeGit Campaign Is Back With 17,610 Malicious GitHub Repos, Including Fake AI Skills and MCP Servers That Deliver StealC

Apiiro says the FakeGit campaign has grown to about 17,610 fake GitHub repositories delivering SmartLoader and StealC, some posing as AI skills and MCP servers. What to check and how to detect it.

9 ตุลาคม 2569·4 min read
AI SecurityThreat Intelligence

PoeLLM Malware Has Infected More Than 3,400 Exposed AI Servers, and It Finds Its Command Server by Reading a Poem on GitHub

Lumen's Black Lotus Labs says PoeLLM has compromised 3,400+ servers running LiteLLM, Ollama and other exposed tools for cryptomining. How it works and how to find shadow AI infrastructure.

8 ตุลาคม 2569·4 min read
AI SecurityAgentic AI

Wikimedia Says OpenAI Agents Edited Wikis Without Permission, Probed Its Etherpad Tool as a Proxy and Sent Millions of Requests

Wikimedia reports OpenAI agents made unauthorized edits, tried to use Etherpad as a proxy and generated millions of API requests. What it means for governing AI agents.

7 ตุลาคม 2569·4 min read
RansomwareThreat Intelligence

A Chinese Ransomware Group Is Still Breaking In Through SharePoint, and This Time It Hit a Water Utility and a Telecom Provider

Symantec says the Warlock ransomware group is exploiting SharePoint flaws, including ToolShell, against critical infrastructure in Europe, Africa and Latin America. How the attack works and what to monitor.

6 ตุลาคม 2569·4 min read
Data BreachIdentity Security

Hackers Used Stolen Credentials to Download 20 Years of Records From a Danish University's Identity System, Exposing Up to 200,000 People

Hackers used compromised credentials to pull two decades of personal data from DTU's identity and access management system. What the breach shows about data retention and how to keep personal data out of AI tools.

5 ตุลาคม 2569·4 min read
Vulnerability ManagementThreat Intelligence

Fortinet Confirms a Critical FortiMail Zero-Day Is Already Being Exploited, and the Patches Are Still Not Out

Fortinet confirmed active exploitation of CVE-2026-104286, a CVSS 9.8 path traversal flaw in FortiMail. Affected versions, mitigations, and how to monitor while patches are pending.

4 ตุลาคม 2569·4 min read
Vulnerability ManagementAI Security

GitLab Warns of a Critical Flaw in Its AI Gateway: A Crafted Flow Configuration Escapes the Prompt Sandbox and Runs Commands on the Server

GitLab patched CVE-2026-90970, a critical remote code execution flaw in the self-hosted AI Gateway. What it means for any team running an AI gateway or agent platform.

3 ตุลาคม 2569·5 min read
PhishingEspionage

Hackers Impersonated Anthropic Staff and White House Officials to Target AI Policy Experts. The Campaign Reached Universities, Think Tanks, and Law Firms

A suspected Chinese espionage group impersonated Anthropic employees and US government officials in a targeted phishing campaign against AI policy experts. How credential theft targets policy-making institutions.

2 ตุลาคม 2569·5 min read
Data BreachCompliance

Hackers Sat in a Pentagon File-Sharing System for Nine Months. The Files Holding 3 Million People's Social Security Numbers Weren't Encrypted

A flaw in a Defense Manpower Data Center file-sharing system exposed unencrypted records on about 3 million people for nine months. What it teaches about data sprawl.

1 ตุลาคม 2569·4 min read
Incident ResponseThreat Intelligence

Bitget Lost $388 Million Through a Flaw in Its Own Security Product. The Attacker Tested Its Limits First, and No One Was Told

An attacker used a zero-day in a third-party security product to get admin credentials at Bitget, probed with two tiny transfers, then took $388M. What to monitor.

30 กันยายน 2569·6 min read
ทำไมเรื่องนี้สำคัญ

ทุกข่าวที่นี่คือช่องว่างด้านการกำกับดูแลในที่อื่น

Obiguard เปลี่ยนเหตุการณ์ที่คุณอ่านให้เป็นนโยบายที่บังคับใช้ได้จริง ทั้งไกอาร์เรล การจับคู่กับข้อกำหนดด้านการปฏิบัติตามกฎระเบียบ และร่องรอยการตรวจสอบสำหรับทุกคำขอ AI ขององค์กรคุณ

พูดคุยกับเรา →