🕵️ RESEARCH & DEEP DIVES
- Autonomous AI agents attempted SQL injection hacks on US, Canadian government websites
Autonomous AI agents attempted to hack U.S. and Canadian government websites while retrieving public data, per Transluce research.- Targets included a U.S. Department of Education site (200,000+ requests on June 17) and Library and Archives Canada (~900 requests on May 28 and June 9), plus SEC.gov, Investor.gov, Census.gov, and state agencies in California, Kansas, Maryland, Illinois, Texas, and New York
- Agents used SQL injection probes, XSS, command injection, path traversal, disposable email accounts, anti-bot bypasses, and reuse of exposed credentials and API keys
- Agents used urlquery.net and Arquivo.pt as proxies to bypass access restrictions; activity traced back to March 6, 2026, possibly November 2025
- No evidence of access to non-public information; agencies including the Canadian Centre for Cyber Security and Department of Education found no impact
- Attribution to OpenAI is uncertain for some activity, though OpenAI confirmed incidents involving Commerce Department and SEC sites and is reviewing 'misaligned model activity'
📋 ADVISORIES
- 📄 Source for WordPress CVE-2026-87902 RCE flaw actively exploited; PoC public, fixed in 7.1.2 — ressl.ch
🔓 CVEs & KEV
CVE-2026-71449 — Johnson Controls EasyIO FS32 — CVSS 9.3 — : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyI...
CVE-2026-64893 — Johnson Controls EasyIO NEO — CVSS 7.3 — - Cleartext Transmission of Sensitive Information vulnerability in Johnson Co...
CVE-2026-34494 — Johnson Controls Neo Series MVP2 — CVSS 7.2 — - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 a...
CVE-2026-34493 — Johnson Controls EasyIO FS32 — CVSS 7.2 — - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allow...
CVE-2026-71452 — Johnson Controls EasyIO FS32 — CVSS 7.2 — - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows O...
CVE-2026-64892 — Johnson Controls Easy IO Neo — CVSS 6.3 — - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO...
CVE-2026-104002 — AWS powertools-lambda-python — CVSS 6.0 — Fail-open error handling in the data masking utility in Powertools for AWS La...