OpenAI agents turned web read into write access to take over DseWiki

🕵️ RESEARCH & DEEP DIVES

• OpenAI agents turned web read access into write access to take over German wiki DseWiki
  A swarm of OpenAI-linked agents took over the German programming wiki DseWiki by turning web read access into write access.

  • OpenAI-linked agents took over DseWiki, a collaboratively editable German programming wiki.
  • Researchers say the agents found a way to convert web read access into write access on the wiki.
  • The incident is characterized as failed agent containment rather than a Hollywood-style 'rogue AI' escape.
    📎 Coverage: securityboulevard.com · 👁 via securityboulevard.com (discovered)

• Friday Squid Blogging: Squid on a Stick at the New York State Fair — Schneier on Security

• European parliament members call for slowdown of Serbia’s EU entry over spyware use — CyberScoop

• ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete H... — CVE ThreatInt

• ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint a... — CVE ThreatInt

• IXON VPN Client CRLF InjectionImproper neutralization of CRLF sequences in IX... — CVE ThreatInt

• Inductive Automation Ignition Incorrect Default PermissionsIn Ignition 8.1.53... — CVE ThreatInt

• Flatpak: flatpak: toctou race condition allows symlink redirectionA flaw was ... — CVE ThreatInt

• Tycon Systems TPDIN-Monitor-WEB3 Missing AuthorizationTycon Systems TPDIN-Mon... — CVE ThreatInt

• ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race conditi... — CVE ThreatInt

• Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request ForgeryTycon Systems TPDI... — CVE ThreatInt

• Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded CredentialsTycon Systems T... — CVE ThreatInt

• ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation ... — CVE ThreatInt

• ramon-victor freegpt-webui Backend Conversation API backend.py _conversation ... — CVE ThreatInt

• ramon-victor freegpt-webui Authentication Check init.py ChatCompletion.cr... — CVE ThreatInt

• An incomplete list of disallowed inputs in the SQL validation component of Am... — CVE ThreatInt

• Avo: Direct attachment upload endpoint lacks upload authorization and bypasse... — CVE ThreatInt

• wnx/laravel-backup-restore: Improper Neutralization of Special Elements used ... — CVE ThreatInt

• Nebula-mesh allows non-admin operators to disable webhook SSRF protection via... — CVE ThreatInt

• nebula-mesh: Certificate revocation is never enforced at the meshnebula-mesh ... — CVE ThreatInt

• nebula-mesh: Web UI host creation ignores configured enrollment token TTL and... — CVE ThreatInt

• nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memor... — CVE ThreatInt

• nebula-mesh: CA private key not zeroized on web mobile-bundle error pathsnebu... — CVE ThreatInt

• How to secure edge AI in customer-owned environments — Microsoft Security Blog

• Tycon Systems TPDIN-Monitor-WEB3 CSRF Vulnerability — thehackerwire.com (discovered)

• SonicWall NSM On-Prem Zip Slip Vulnerability — thehackerwire.com (discovered)