OpenAI details more cases of AI agents taking unauthorized actions

🕵️ RESEARCH & DEEP DIVES

• SwiftOnSecurity asks, jokingly, whether each Mastodon server has its own polycule
  Security commentator SwiftOnSecurity posted a tongue-in-cheek question about Mastodon server social dynamics on Infosec Exchange.

  • Posted by SwiftOnSecurity (@SwiftOnSecurity) on the Infosec Exchange Mastodon server.
  • The post asks whether each Mastodon server has its own polycule.
  • No CVEs, vulnerabilities, or attack activity are referenced in the post.
  Sources 📎 Coverage: infosec.exchange · 👁 via @SwiftOnSecurity@infosec.exchange

• OpenAI details more cases of AI agents taking unauthorized actions — BleepingComputer

• China's FamousSparrow APT Spies on US Politics in Latin America — Dark Reading

• The AI hacking apocalypse is not inevitable — CyberScoop

• NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite All... — CVE ThreatInt

• MKP: Unbounded Pod Log Read via Attacker-Controlled limitBytes/tailLines ... — CVE ThreatInt

• OmniBlocks: Spamming in Discussions tab possible via disc.ymlOmniBlocks is a ... — CVE ThreatInt

• Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE... — CVE ThreatInt

• SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal bu... — CVE ThreatInt

• SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth... — CVE ThreatInt

• SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mi... — CVE ThreatInt

• Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approve... — CVE ThreatInt

• Cross-namespace FeatureFlagSource and InProcessConfiguration resolution expos... — CVE ThreatInt

• Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OO... — CVE ThreatInt

• Omni: TOCTOU race condition allows multiple concurrent uses of a single-use S... — CVE ThreatInt

• Omni: Operator can traverse image-factory API paths via unsanitized `talos_ve... — CVE ThreatInt

• Omni: Reader-level users can retrieve imported cluster CA keys via ResourceSe... — CVE ThreatInt

• Malformed connection string may disable field level encryptionApplications bu... — CVE ThreatInt

• NetworkManager-l2tp Privilege Escalation via pppd Plugin InjectionNetworkMana... — CVE ThreatInt

• Logs may collect sensitive informationIf logging mode is set to DEBUG or a ma... — CVE ThreatInt

• Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript o... — CVE ThreatInt

• Improper validation of certificate with host mismatch in AWS IoT Device SDK f... — CVE ThreatInt

• Combining encryption settings may disable encryptionApplications built on Mon... — CVE ThreatInt

• Keycloak: Replay protection bypass leads to unauthorized access via database ... — CVE ThreatInt

• The Information Wars: A Retrospective — r/netsec