Latest / Daily DefSec Brief / Cyber Security News for October 13 2026 - Daily DefSec Brief
Transcript
- Jerry: One vendor says AI found bugs are part of why it now patches monthly. Its answers for customers who can't test that fast is a new product it'll sell you. This is the daily DefSec Brief for Tuesday, October 13th, 2026. One, someone with no login can run code on a self-managed GitLab server through a crafted regular expression in a pipeline file. GitLab says it takes certain conditions and there's no report of exploitation yet. That server holds your source code and your pipeline secrets. GitLab.com is already patched And the fix for your own server shipped yesterday, so upgrade today. 2. Windows 11 23H2 Enterprise and Education gets their last security update on November 10th. After that, any new flaw found in them stays open on those machines. Microsoft's Patch Tuesday release later today is the second to last update those machines will ever get. Find the machines still on 23H2 and move them to a supported version. Three, attackers took over refrigeration controllers at hundreds of French supermarkets on Sunday night. They turned on the defrost cycle. Staff came in on Monday to spoiled fresh and frozen food. The controllers are Dan Foss, and Dan Foss says most of the ones hit were end-of-life models or running old firmware. One chain says the attacker reportedly hit a service provider that runs his refrigeration. How the attackers got in isn't known yet. One researcher's scan on Monday found nearly 2,800 Dan Foss systems on the internet. This is clearly the work of the notorious APT known as Fozzie Bear. When a contractor runs equipment remotely, it's easy to leave it out of IT's inventory. find the vendor managed gear on your network that answers from the internet and put it behind a VPN. Four. Attackers posing as a startup accelerator offered crypto startups free Claude and Gemini credits, plus a coding agent to spend them in. It was published on MPM as Apex ACC. It's a copy of an open source agent called OMYPie. Its startup code points the model traffic At the attacker's server while the agent still says it's talking to OpenRouter. That server collects the prompts and the files the agent reads and it could answer with tool calls of its own. The same operations tools also installed password stealing malware on Windows and Mac machines. Check where your developer's coding agents are actually sending the traffic and treat any machine that ran this one as compromised. Five Budget Android phones sold on online marketplaces are arriving with malware already in their firmware. And the owner can't uninstall it. It installs apps silently, runs ad fraud, and can rent out the phone's connection as a residential proxy. That proxy can reach the network the phone is sitting on. The phone was cheap because you're not its only customer. Keep unmanaged phones on a guest network that can't reach anything internal. Six. Researchers tricked six popular AI agent frameworks into running a tool call an attacker wrote. They include Langgraph, Autogen, and Crew AI. They asked the model to repeat the call as a hypothetical. The model sent it to a real tool call, the framework ran it, and only then did the model refuse. The system prompt only shaped what the model said and the framework acted anyway. The same team found verified bugs in more than 40% of open source MCP servers they tested. Put the permission check inside each tool itself. 7. VMware has moved VMware Cloud Foundation to monthly updates, partly because AI is finding so many bugs in its products. It admits customers are already struggling to test patches fast enough. Its answer is HyperArmor, an add-on that will sell separately. It blocks attacks on unpatched flaws, and it blocks unapproved configuration changes. It also adds MFA to SSH logins on ESX hosts aimed at attackers holding stolen admin credentials. Plan for monthly patching and keep SSH turned off on your hosts when you're not using it. That's a mighty nice VMware server you got there. It would be a shame if something were to happen to it. If you only do one thing today, upgrade your self-managed GitLab servers. Thanks for watching. The sources are in the show notes. Like, subscribe, and share the show with a friend who'd use it. I'm back again tomorrow.