[artex-ai]

October 7, 2026

• South Korea believes AI agents were used in a run of bank breaches. At least 68,000 people's data was exposed across at least seven financial institutions — Hana, KB Kookmin and Shinhan among them, the latter reporting roughly 25,000 affected customers — with borrowing history, income, phone numbers and names in the exposed set. Authorities have identified 33 IP addresses across at least 12 countries and point to the Chinese tool Artex AI; President Lee said "signs have emerged" of agent involvement, which stops short of confirmation. Incidents first surfaced September 30 (The Record, BleepingComputer) (discussion). · AI & Model Security

in Pre-Auth File Read Hits Eight Atlassian Data Center Products

October 5, 2026

Citrix Names the NetScaler SAML Zero-Day and Ships an Emergency Patch

Citrix released an emergency patch for CVE-2026-88779, a SAML authentication bypass in NetScaler that requires no authentication and is being actively exploited in the wild; researchers are investigating whether the vulnerability extends beyond denial-of-service to remote code execution. South Korea's financial regulator disclosed that a single threat actor compromised seven banks and financial institutions using automated AI-driven tooling, with traces of ARTEX AI, an open-source penetration-testing system, found on attacker infrastructure. Claude Code was found vulnerable to prompt injection via .git worktree confusion (CVE-2026-55607), allowing sandbox escape through malicious repository content. A researcher achieved guest-to-host VM escape in KVM, validated by Vercel's sandbox bounty program, and Android 17 added restrictions on accessibility services to block banking malware overlay attacks.