https://gnosly.com/feed/cybersecurity/Business Intelligence Console and Prediction Algorithms3913@CoffeReportCoffe Report<p>Recent cybersecurity research has identified: </p><p>• 8,547 exposed wind and solar systems across 35 European countries. </p><p>• 7,435 industrial Siemens control systems across 77 countries. </p><p>• 12,976 refrigeration service observations across 99 countries. </p><p>• ~7,000 vulnerable operational technology devices. </p><p>• 50,000 access and building security misconfigurations. </p><p>These findings come from separate European and global studies, using different methodologies. </p><p>Not every exposed system is vulnerable, and exposure does not automatically mean compromise. But the recent refrigeration attacks demonstrate why this matters.</p><p>The problem extends far beyond supermarket freezers - into energy, manufacturing, building automation, and physical security.</p>https://x.com/CoffeReport/status/21180984105953693140.00202026-11-05T16:48:06.722454+00:002x.comeucybersecurityhacking3840https://pbs.twimg.com/media/HWT-nh1XYAAARc2?format=jpg&name=smallImage2026-11-05T16:48:07.783542+00:003912@IntCyberDigestInternational Cyber Digest<p>Source: IntCyberDigest (X)</p>https://x.com/IntCyberDigest/status/21183546759424288600.00102026-11-05T16:38:21.354625+00:002x.comopensshhackingcybersecuritylinux3839IMAGE/media/content/3912/image.pngimage.pngpng2026-11-05T16:39:59.577081+00:003911@IntCyberDigestInternational Cyber Digest<p>It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY". </p><p>Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.</p>https://x.com/IntCyberDigest/status/21183433257700066900.00202026-11-05T16:30:22.926429+00:002x.comopensshlinuxhackingcybersecurity3837https://pbs.twimg.com/media/HWXQ5cWW4AAX0K8?format=jpg&name=360x360Image2026-11-05T16:30:23.344570+00:003873https://www.linkedin.com/in/g%C3%A9raldine-monchau-richard-caia-6121525/Géraldine Monchau-Richard, CAIA<p>Hackers are hitting the world's money system in 7 places almost at the same time.</p><p>1/ France: more than €118 million (about $133 million) was pulled out of Crédit Mutuel Arkéa over several days and turned into crypto. Today its app was down, and EVERY transfer was blocked. The bank says customers lose nothing.</p><p>2/ Belgium: on October 28, the federal finance ministry said a cyberattack hit it. The online tax portal was SHUT, and tax deadlines will be pushed back.</p><p>3/ Eurozone: on October 22, the European Central Bank, the bank behind the euro, confirmed that attackers planted malware on one of its websites.</p><p>4/ South Korea: at least 9 banks have been targeted since late September by an attacker using an AI hacking agent. At Shinhan Bank alone, about 25,000 customers had their names, phone numbers, incomes, and loan limits exposed.</p><p>5/ Japan: hackers broke into GMO Internet and demanded $50 million in crypto. The prime minister promised an emergency anti-cyberattack package.</p><p>6/ At least 14 countries: China-linked hackers used AI agents to attack 200+ organisations in just 11 days. Finance was on the target list.</p><p>7/ Crypto: more than $6 billion drained from Binance hot wallets on 11 blockchains on October 29, most of it in about 30 minutes. The FBI says North Korea did it</p>https://lnkd.in/p/dY-HhnnU0.00202026-11-05T05:37:48.078217+00:001linkedin.comcybersecurityhackers3790https://media.licdn.com/dms/image/v2/D4E22AQHn0tLVow_UkQ/feedshare-shrink_800/B4EaGoNIwaKIAc-/0/1793823378760?e=1795651200&v=beta&t=4r9xnc1B7IR5PmD4rCwcFhDQEFv7U8tszFu11iPMSQ8View image2026-11-05T05:37:49.491501+00:003641<p>Binance, the world's largest crypto exchange, said on Oct. 29 that a security incident affected $6.3 billion in customer assets, which would be the largest crypto hack ever. Binance co-founder Changpeng Zhao, who stepped down as CEO in 2023, said the theft "does look like a hack." Binance has temporarily suspended all withdrawals and deposits and said it would cover all losses of an estimated $6.3 billion in digital assets using its Secure Asset Fund for Users and company reserves.</p>https://finance.yahoo.com/personal-finance/investing/article/what-binance-users-should-do-right-now-following-63-billion-hack-152239989.html0.00202026-10-31T06:57:14.851147+00:0040yahoo.combinancehackingcybersecurity3603https://www.linkedin.com/in/charles-henry-monchau-cfa-cmt-caia-4003096/Charles-Henry Monchau, CFA, CMT, CAIA<p>Around $3 BILLION has already been frozen. 🇰🇵 North Korean hackers are suspected to be behind the attack.</p>https://lnkd.in/p/drr-dVbn0.00202026-10-30T13:11:47.074370+00:001linkedin.combinancehackingcybersecurity3489https://media.licdn.com/dms/image/v2/D4E22AQHZD_lXWGKnZw/feedshare-shrink_800/B4EaGMWEuYH0Ac-/0/1793355959690?e=1795046400&v=beta&t=XCP3x5p_LvGk0KeIXqTT6zluv_DJDvjyYMGMMa8_op4View image2026-10-30T13:11:47.635615+00:003541@GoogleDeepMindGoogle DeepMindGemini 4 Carbon is our next frontier model. It’s state-of-the-art across cybersecurity and long-horizon capabilities.https://x.com/GoogleDeepMind/status/21154893564376516540.00102026-10-29T06:14:19.626940+00:002x.comaicybersecuritygemini3399https://pbs.twimg.com/media/HVu5JfhXkAAHYVr?format=jpg&name=smallImage2026-10-29T06:14:21.392499+00:003298https://www.linkedin.com/in/dr-barry-scannell-bbb5aa207/Dr. Barry Scannell<p>Takeaway: <strong>AI is clearly exposing weaknesses in our digital infrastructure faster than we can respond</strong></p><p>This week, researchers aided by OpenAI's models uncovered two critical flaws in PHP, the language behind roughly 70% of websites whose server-side code is known. Dubbed PHP2Shell, they allow an attacker without credentials to take control of a vulnerable server. The NSA and the FBI advised organisations unable to patch immediately to take affected systems offline, and government sites in France, Germany and the Netherlands went dark, along with dozens of Dutch hospital websites. </p><p><strong>Attackers moved faster than the patchers.</strong> </p><p>Cloudflare saw tens of thousands of exploit attempts within 45 minutes of the announcement and millions soon after. Amazon's security chief observed that AI-assisted analysis now makes it cheap to turn a published advisory into a working exploit, so the window between disclosure and attack is collapsing to hours. We will see more of this. </p><p>The backdrop is more disturbing still. In August, Britain's AI Security Institute documented an agent that created fake identities modelled on real developers in an attempt to plant malicious code in an open-source project. </p><p>This month, researchers made contact with a fleet of AI agents on Chinese cloud infrastructure that had spent days probing a mapping service, evading its bot defences and trying leaked credentials. Axios reported this week that America's largest banks are detecting unvetted AI agents inside customer accounts, some apparently acting beyond their users' instructions. </p><p>Researchers have also shown AI-driven worms spreading through test networks of connected devices, and Anthropic warns that smaller models may soon replicate across ordinary household hardware.I am increasingly concerned that we are flirting with a loss-of-control situation, and it would require no sinister intent. </p><p>Give a capable model a goal, the tools to pursue it, and access to the internet, and it can cause serious damage while doing exactly what it was trained to do. Our security assumptions were built for a world in which people found vulnerabilities, wrote exploits, and decided when to act. </p><p>The next crisis may instead arrive as thousands of automated actions accumulating faster than anyone can understand or stop them. </p>https://lnkd.in/p/d8FZ6Fmn0.00802026-10-23T14:31:24.863836+00:001linkedin.comcybersecurityai3137https://media.licdn.com/dms/image/v2/D4D22AQEkzjKVBBgYOw/feedshare-shrink_800/B4DaFl__V9KcAc-/0/1792712636087?e=1794441600&v=beta&t=XRqew8u7Vgb1zSXoEiA9qkBJnC14BN_TnLa_-N7NWJ4View image2026-10-23T14:31:25.322016+00:003275<p>Major U.S. banks are finding AI agents inside customer accounts and can’t always tell whether the customer sent them, a day after hackers used Claude and Grok against 400+ Latin American banks. </p><p>Axios reported Thursday morning that several of the largest banks in the U.S. have been finding AI agents working inside customer accounts without the bank's permission. In a scoop by Madison Mills, sources named Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo among the banks trying to get a handle on it, and said some of the agents had tried to do things the customer apparently never asked for. Bank executives told Axios the situation was horrifying.</p>https://www.thestateofai.com/news/ai-agents-bank-accounts-jpmorgan-bank-of-america?ref=gnosly0.00702026-10-23T06:45:39.564436+00:0036thestateofai.comcybersecurityai3115https://www.thestateofai.com/media/uploads/532c2a77dc329990906faf139280c592584656b42aadf3ae96344caca403be00.png2026-10-23T06:45:41.254271+00:003139@ValsAIVals AI<p> Source: ValsAI (X)</p>https://x.com/ValsAI/status/21124710823977780830.00502026-10-20T12:54:53.311994+00:002x.comcybersecurityaideepseek2995https://pbs.twimg.com/media/HVD946nbcAAam5i?format=jpg&name=smallImage2026-10-20T12:54:54.278492+00:002083https://www.linkedin.com/in/guillermoflor/Guillermo Flor<p>BIG MOVE: OpenAI reportedly caught China's Moonshot AI running a coordinated campaign to extract its most protected AI reasoning.This wasn't a hack. It was something more deliberate.Reports indicate 16,000+ requests across thousands of users over roughly two days, eventually scaling to 15,000+ total users before OpenAI shut it down.The alleged method: manipulating model interactions to surface hidden reasoning, no database breach, no encryption broken.OpenAI has reportedly flagged the activity to the Frontier Model Forum and government channels.This comes after Anthropic accused Moonshot AI and Alibaba of secretly using Claude to train competing models.If the pattern holds, the playbook is clear: extract Western AI capabilities without the R&amp;D cost.Not a technical dispute anymore. IP warfare at the frontier.Who gets hurt most if this attack model becomes standard practice?</p>https://lnkd.in/p/gyEQJYgk0.00802026-10-01T16:01:47.987822+00:001linkedin.comcybersecurityopenaiai1892https://media.licdn.com/dms/image/v2/D4D10AQF1xlVQWBY3nw/image-shrink_800/B4DaD4J9PKKIAg-/0/1790869755163?e=1791478800&v=beta&t=RjmIqyz63FhyE11dQsEjsF-8QRFrq7r-psi7AcRnrAEView image2026-10-01T16:01:49.074960+00:00279@OpenAIOpenAIAs we prepare to release Astra, we’re focused on making increasingly capable AI safe and broadly accessible. Astra represents a significant advance in cybersecurity capability, reaching the Critical threshold under our Preparedness Framework. We're previewing how we evaluatedhttps://x.com/home0.00402782026-09-02T13:35:10.508882+00:002x.comcybersecurityaiastra257https://pbs.twimg.com/profile_images/1885410181409820672/ztsaR0JW_mini.jpgSquare profile picture2026-09-02T13:35:10.678968+00:00278@levieAaron LevieAI for cyber is about to go vertical. The models increasingly becoming insanely good at finding and exploiting vulnerabilities. Frontier models are ahead, but we’re already seeing that open weights is not far behind. Most enterprises are already inundated with cyber discoveries,https://x.com/levie/status/20950246994411196120.00402792026-09-02T13:35:10.224276+00:002x.comcybersecurityaivulnerabilities256https://pbs.twimg.com/media/HRMF3JGa4AArAwx?format=jpg&name=smallImage2026-09-02T13:35:10.485221+00:00