GhostLock: The 15-Year Linux Flaw That Hands Any User Root
Researchers at Nebula Security have disclosed CVE-2026-43499, a privilege-escalation vulnerability dubbed GhostLock that has existed in the Linux kernel since 2011 and ships by default in essentially every mainstream distribution. No special permissions, no unusual configuration — any logged-in user can escalate to full root. A separate Linux vulnerability disclosed the same week earned Google a $250,000 bug bounty payout. Two root-privilege flaws surfacing in a single week is notable; patch windows for Linux systems in Australian government and enterprise environments are governed by ASD's Essential Eight patching requirements, which mandates 48-hour remediation for exploitable internet-facing services.
The Hacker News ↗HalluSquatting: Turning AI Hallucinations Into a Botnet Delivery System
New research demonstrates a class of attack called HalluSquatting: identify the fake package names that AI coding assistants reliably hallucinate, register those names in real package repositories, and wait for the assistant to fetch your malicious payload on a developer's behalf. Researchers tested nine popular AI tools — including widely-used coding assistants — and found all of them susceptible. The attack is particularly insidious because the developer never types the wrong package name themselves; the AI does it for them. It's a supply chain attack that exploits the gap between what a model confidently says exists and what actually does.
The Hacker News ↗AI Coding Agents Are Tripping Endpoint Security — Because They Look Like Attackers
Sophos analysed a week of its own endpoint telemetry and found that AI coding tools including Claude Code, Cursor, and OpenAI Codex are routinely triggering detection rules designed to catch human intruders. The agents decrypt browser credentials, enumerate Windows credential stores, and execute shell commands in patterns that behavioural engines can't distinguish from an active intrusion. The tools aren't malicious — they're just thorough. But the finding puts security teams in an uncomfortable position: tune out the alerts and you risk missing real attacks; keep them loud and you drown in noise from your own developers' tooling.
The Hacker News ↗Ubiquiti Patches a Perfect-10 Flaw Across Its Entire UniFi Product Line
Ubiquiti has pushed security updates across UniFi Connect, Talk, Access, Protect, and OS to address multiple critical vulnerabilities, including CVE-2026-50746 — a CVSS 10.0 improper access control flaw in the UniFi Connect application. Successful exploitation could allow privilege escalation and arbitrary command execution. UniFi hardware is widely deployed in Australian SMBs, hospitality venues, and managed service provider environments, making prompt patching essential. If you manage a network running any UniFi product, treat this as a this-week priority rather than a next-cycle item.
The Hacker News ↗Accenture Confirms Breach After Hacker Claims Source Code Theft
Accenture has confirmed a data breach following claims by a threat actor that they extracted source code from the professional services giant. The company says the incident was contained, the source of the breach remediated, and that there was no impact on client operations or service delivery — the standard post-breach language that tells you very little. Accenture is one of the largest IT and consulting service providers operating in Australia, with significant public-sector contracts. Under Australia's Notifiable Data Breaches scheme, any compromise affecting Australian client data would trigger reporting obligations to the OAIC.
SecurityWeek ↗China-Linked UAT-7810 Expands Router-Based Relay Network With New Malware Toolkit
Cisco Talos has published new research on UAT-7810, a Chinese state-linked APT that is actively expanding its LapDogs operational relay box (ORB) network — a web of compromised SOHO routers used to anonymise intrusion traffic. The group has added three new backdoors: LongLeash, DogLeash, and JarLeash, all designed to burrow into internet-facing networking devices. ORB networks are particularly difficult to attribute and block because the malicious traffic appears to originate from legitimate consumer hardware. Australian organisations with internet-facing routers — particularly in SMB and home-office environments — sit in the potential blast radius.
The Hacker News ↗GitHub's 'Verified' Badge Can Be Faked — Without the Signing Key
New research reveals a fundamental weakness in Git's commit verification model: an attacker who doesn't have a developer's signing key can still produce a second commit with identical files, author metadata, and date — one that GitHub will stamp with its green 'Verified' badge. The commit hash changes, but nothing a code reviewer would normally inspect does. For software supply chains that rely on GitHub's verification as a trust signal — including Australian government repositories subject to ASD secure software supply chain guidance — this is a meaningful finding about where that trust actually bottoms out.
The Hacker News ↗OpenAI Launches GPT-Live, a Voice Model Built for Real Conversations
OpenAI has released GPT-Live-1, a new voice model designed to feel less like talking to a voice assistant and more like an actual conversation. The model can speak and listen simultaneously, is better calibrated to wait out natural pauses without cutting in, and routes complex queries to GPT-5.5 in the background when it needs to reason or search. It's now powering ChatGPT Voice. OpenAI is framing simultaneous translation as a key use case — a meaningful pitch given how many businesses use real-time voice AI for customer service. The release lands as xAI also pushed out Grok 4.5, positioning it as a cheaper alternative to frontier-class models.
OpenAI Blog ↗A Solo Attacker Used AI to Breach AWS in 72 Hours and Extort the Victim
A lone threat actor exploited AI-assisted workflows, chained cloud misconfigurations, and stolen credentials to break into an Amazon Web Services environment belonging to a large AWS customer — completing the attack and moving to extortion within 72 hours. The incident is a concrete example of what security researchers have been modelling theoretically: AI dramatically compresses the time and skill floor required for a cloud intrusion. It also echoes themes from last Friday's lead on fully autonomous ransomware, but with a single human operator using AI as a force multiplier rather than removing the human entirely.
Dark Reading ↗Australia's AI Jobs Report: No Mass Disruption Yet, But the Department Is Watching
A new report from Australia's Department of Employment and Workplace Relations has found no evidence that AI has caused broad, measurable disruption to the domestic labour market so far. The finding will be cold comfort and cold water in roughly equal measure — cold comfort for workers anxious about displacement, cold water on some of the more breathless predictions about AI-driven mass unemployment. The department is careful to frame this as a point-in-time assessment rather than an all-clear. Australia's industrial relations framework, including enterprise bargaining obligations, is still catching up to questions about how AI-assisted work should be classified and compensated.
The Mandarin ↗Meta's AI Glasses Get a Covert-Recording Safeguard — While Collecting More Data Everywhere Else
Meta is adding a technical control to its Ray-Ban AI glasses intended to prevent covert recording of people without their knowledge — a response to demonstrable real-world privacy concerns after researchers showed the glasses could be used to identify strangers in public. The update is genuine, but TechCrunch notes the timing is awkward: Meta is simultaneously expanding the data its AI products collect and process across its entire ecosystem, including a new patent for a wearable that tracks emotions and medication intake. The gap between Meta's privacy messaging and its data strategy is getting harder to paper over.
TechCrunch AI ↗