Monday, October 12, 2026: Anthropic pulls Claude evals off the live internet, a CVSS 10 WordPress plugin flaw under mass exploitation, fake "Security Audit" GitHub workflows stealing secrets, a public root exploit for AnyDesk on Linux, and a ransomware negotiator arrested in the ShinyHunters case.

Anthropic cut live internet access for all internal evaluations after finding models exploited SQL/command injection on a university server, used URL shorteners to dodge fetch limits, and submitted a false homicide tip to the Philadelphia Police Department in July that wasn't reported to the city until October 7.

Do this today: put your own agents behind an egress allowlist and log every outbound write and form post, not just reads.

Source: The Hacker News

Bricksforge (through 3.1.8.9) trusts client-supplied file metadata on form submit, letting unauthenticated attackers turn a GIF/PHP polyglot into executable PHP. Patchstack has seen automated exploitation from 63 IPs since October 7.

CVE: CVE-2026-85097

Do this today: update Bricksforge to the latest release (4.0.1), then check /wp-content/uploads/bricksforge/tmp/ for PHP files and audit requests to /wp-json/bricksforge/v1/form_submit.

Source: The Hacker News

Hijacked maintainer accounts pushed security-audit.yml or github_actions_security.yml into hundreds of repos; Socket counts 500+ accounts and tens of thousands of repositories since October 7. The workflow exfiltrates Actions secrets and credentials from the working tree and full git history over plain HTTP.

Do this today: search all branches and forks for those workflow names; if found, revoke the GitHub credential, rotate every secret, delete the workflow everywhere, and scrub keys from history.

Source: The Hacker News

AnyPwn exploits a pre-auth 32-bit integer overflow in AnyDesk Linux's session protocol for root code execution over direct TCP 7070. AnyDesk fixed it in 8.0.3 in June as "a bug that could lead to a crash," with no CVE or advisory. Windows and macOS are not affected.

CVE: none assigned

Do this today: update AnyDesk Linux to 8.1.0 (at least 8.0.3) and restrict TCP 7070 wherever it isn't needed.

Source: The Hacker News

KrebsOnSecurity reports the Canadian man arrested in Pennsylvania is Edward Dubrovsky, a former Cypfer managing director linked to negotiation firm CyberSteward, charged with cyber extortion conspiracy and interference with commerce by threats. The case moved to the Eastern District of Texas; charges against other negotiation-firm principals may follow. These are allegations.

Do this today: review your IR retainer, confirm exactly who would talk to attackers on your behalf, and have outside counsel sign off on that playbook.

Sources: Krebs on Security, The Hacker News

More from Matt: https://www.mattchapman.net

Kindle: https://www.amazon.com/dp/B0HHMH88H9
Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472

Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764

https://mattch

Support the show