news · 10 min
Hundreds of French supermarkets lost refrigeration overnight. The vector is still unconfirmed; the prime suspect is a controller that validates the technician with a password derived from today's date. We pulled the firmware, ran it in a lab and got in with no credentials.
· Manuel López Pérez y Pablo Plaza Martínez
news · 23 min
Trail of Bits turned GPT-5.6-Cyber loose inside a patched QEMU/KVM VM and it escaped three times in twelve hours, the last one with three of its own 0-days. OpenAI rewrites its Preparedness Framework and keeps its largest RL run paused; Brockman warns that open-weight models with cyber capability land at the end of August, and they do: GLM-5.3 scores 84.5% on CyberGym. OWASP publishes the LLM Top 10 2026 with Excessive Agency at number three. Attacks on US water go from 30 utilities to more than 100 and CISA issues exposure guidance. Patch Tuesday closes 421 CVEs and Oracle 943. Two TeamPCP members arrested in Perth, and Boston Scientific sends its Cork plant home.
· Manuel López Pérez
news · 15 min
The first ten days of August close what July left open. Tailscale reconstructs the Hugging Face intrusion: an escaped agent enrolled 181 nodes into the tailnet with a reusable key, and the prize was the credential vault. Truffle finds 221,303 live secrets in Hugging Face public datasets. UK AISI catches Mythos 5 and GPT-5.6 Sol inventing fake GitHub identities to sneak in code. US water under real attack: 4,400 Rockwell PLCs exposed. OSAA proposes SAFE, and the White House says, at Black Hat, there will be no new rules. The npm worms return, five CVEs hit the KEV with a three-day deadline, and the AI Act 2 August date arrives empty.
· Manuel López Pérez
news · 19 min
On 16 July Hugging Face discloses an intrusion into its production infrastructure carried out by an autonomous agent. On the 21st, OpenAI confirms the agent was its own: two models under evaluation escaped the sandbox. On the 30th, Anthropic discloses three incidents of its own. Commercial model guardrails blocked the forensic work, so Hugging Face analysed its logs with an open-weights model. Patch Tuesday closes 622 CVEs, triple June record; the Linux kernel ships 432 in two days and Oracle more than 1,400. The Omnibus lands in the Official Journal as Regulation (EU) 2026/1744, and Spain ends up before the Court of Justice over NIS2.
· Manuel López Pérez
news · 13 min
Anthropic launches Fable 5 and Mythos 5 on 9 June; three days later the Department of Commerce pulls them over export control, and they stay dark until 1 July. The AI Act Omnibus is formally adopted: Annex III lands on 2 December 2027. Patch Tuesday breaks its all-time record (~200 CVEs, six zero-days) after a May with none. FortiBleed compromises hundreds of thousands of FortiGate. The developer supply chain burns across four ecosystems at once, and the agentic surface stops being theoretical: zero-click RCE in Cursor, agentjacking over MCP.
· Manuel López Pérez
news · 13 min
The Digital Omnibus reaches a provisional deal on 7 May: Annex III moves to December 2027. Spain approves its AI governance bill on 26 May. Pwn2Own Berlin pays out $1.3M for 47 zero-days, with Codex and Claude Code on the menu. Patch Tuesday ships with no zero-days for the first time since June 2024. OpenAI launches Daybreak and Anthropic moves Mythos toward GA. Verizon DBIR 2026 crowns vulnerability exploitation as the number-one vector. GitHub loses 3,800 internal repos to a poisoned VS Code extension.
· Manuel López Pérez
ai-security · 13 min
Three years of red team with LLMs. PentestGPT (Aalto/NTU paper, Aug 2023, USENIX 2024) opens the academic category; HackerGPT and WhiteRabbitNeo build the commercial side; XBOW (July 2025) reaches #1 globally on HackerOne with 1,060 reported vulns. Reproducible PoC with PentestGPT v2 against HackTheBox.
· Manuel López Pérez
ai-security · 17 min
Pickle as a broken legacy format, inference servers as a new HTTP attack surface, AI gateways as a pivot into the infra, and ML frameworks running with research-project security. The 2024–2026 arc with the Wiz / Oligo / JFrog / Orca / Datadog milestones and the PoCs they left behind.
· Manuel López Pérez
news · 13 min
The Omnibus trilogue closes without agreement on 28 April, leaving the original AI Act deadline three months away. Patch Tuesday with 165 CVEs and an active SharePoint zero-day. Anthropic announces Claude Mythos + Project Glasswing — the first frontier model held behind a defensive wall. Pwn2Own Berlin collapses under oversubscription. M&S one year on. AESIA publishes guides 13 and 14.
· Manuel López Pérez
compliance · 18 min
The third step of Regulation (EU) 2024/1689 enters application on 2 August 2026: Annex III high-risk systems, FRIA, post-market monitoring, CE marking, EU register. The Commission's Digital Omnibus proposes pushing it to 2 December 2027, but the 28 April trilogue closes without agreement. What to have ready on 2 August if Brussels doesn't make it.
· Manuel López Pérez
news · 17 min
LiteLLM supply chain: TeamPCP compromised Trivy first to reach the PyPI credentials of the maintainer and ship litellm 1.82.7 / 1.82.8 with a 3-stage payload. nginx-ui MCPwn (CVE-2026-33032, CVSS 9.8) exploited in the wild. Patch Tuesday loud on AI: XBOW takes the month's CVSS 9.8. Mandiant M-Trends 2026 reports 22 seconds between initial access and ransomware. VMware Aria Operations in CISA KEV. NVIDIA GTC presents NemoClaw for agentic security. DORA first Register of Information with 31 March deadline.
· Manuel López Pérez
ai-security · 19 min
March 2025 was the month of the first tool poisoning paper with a PoC. March 2026 closes the cycle: two spec revisions (2025-06-18 and 2025-11-25), OWASP MCP Top 10 v0.1, 15+ public incidents, 24,000 secrets leaked in GitHub configs, 1,808 servers scanned with 66% findings, an academic benchmark (MCPTox) at 72.8% ASR against o1-mini, and CVE-2026-33032 (nginx-ui MCPwn) actively exploited in the wild, patched 15 March. An operational read of the ecosystem.
· Manuel López Pérez
