📋 ADVISORIES
-
U.S. Coast Guard Creates Office for Maritime Cybersecurity Policy
The U.S. Coast Guard has established a central office for maritime cybersecurity policy.- The office covers U.S. ports, vessels, maritime facilities, and the Marine Transportation System.
- It will oversee cybersecurity policy for maritime information and operational technology.
- CG-MCP will develop domestic policy, contribute to international standards, and coordinate compliance and enforcement.
- The Marine Transportation System includes roughly 360 commercial sea and river ports.
- The office will act as the Coast Guard’s primary cybersecurity liaison with industry and government agencies.
📎 Coverage: securityweek.com · 👁 via SecurityWeek
-
OpenAI Limits Astra Cyber Access Over Potential Critical Capabilities
OpenAI says its upcoming Astra model may have critical cybersecurity capabilities.- OpenAI’s upcoming Astra model is affected; advanced cyber access will initially be limited to select Daybreak Blue partners.
- Astra may identify and develop functional zero-day exploits against hardened real-world critical systems.
- The model may execute end-to-end cyberattacks against hardened targets with little or no human guidance.
- Astra can chain multiple exploits to penetrate targets more deeply; WIRED reports it scored 100% on ExploitBench.
📄 Source: openai.com · 📎 Coverage: wired.com · 👁 via @metacurity@infosec.exchange
🔓 CVEs & KEV
-
CVE-2026-84304 — grpc grpc-go — CVSS 8.7 — gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame FragmentationgRPC...
-
CVE-2026-83551 — AWS sagemaker-python-sdk — CVSS 8.5 — Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@r...
-
CVE-2026-19953 — CPANSec URI — CVSS 6.5 — URI versions before 5.36 for Perl encode non-NFC host names to non-standard p...
-
CVE-2026-84303 — grpc grpc-go — CVSS 6.3 — gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC ...