Newsletter 2026-10-06

Another week, another round.

Unit42 gives an insight into the risks that (AI-based) operators in Kubernetes clusters can pose when not properly secured.

• https://unit42.paloaltonetworks.com/agentic-ai-kubernetes-operator-risks/

A Mac ARM infostealer is now also being used on older Intel-based Macs. IRU took a closer look at the new variant.

• https://www.iru.com/blog/pamstealer

Quarkslab presents their setup for AI vulnerability research, built around a deterministic core with LLMs acting as reviewer, hypothesis generator, and PoC developer.

• http://blog.quarkslab.com/from-ai-agents-to-rce-building-a-vulnerability-research-workflow.html

Google’s Threat Intelligence Group looked at statistics on published and exploited vulnerabilities. In August of this year alone, over 10,000 vulnerabilities were published, a significant increase compared to January. Exploitation has risen at roughly the same rate. Also included is a breakdown of the ratio between AI-discovered and human-discovered vulnerabilities.

• https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/

MS Copilot is now available across a variety of systems, and that brings new attack surface with it. Case in point, Microsoft’s Copilot in SSMS (SQL Server Management Studio). At BlueHat Asia, Johann Rehberger presented CVE-2026-65669, a SQL Server Elevation of Privilege vulnerability that Microsoft rated as critical.

• https://embracethered.com/blog/posts/2026/from-select-to-sysadmin-sql-copilot-bluehat-asia/

Nico Dekens shows how a phishing campaign unfolds live. A Bloomberg request via X (formerly Twitter) was used as the lure.

• https://www.dutchosintguy.com/post/phishing-campaign-identified-how-osint-exposed-a-real-calendly-link-in-a-fake-bloomberg-interview-i

Read you next week.