Ai-Agents
Cisco BroadWorks CVE-2026-20320 XXE Added to KEV After Jailbroken AI Agent Used It to Breach a European Telco
CISA lists Cisco BroadWorks CVE-2026-20320, a blind XXE in the OCI XML parser, as exploited after Malbear Labs tied it to an autonomous AI-driven intrusion at a European telecom provider.
MemTensor MemOS Packages Backdoored with sckit, a Go Credential-Stealing Worm, on npm and PyPI
Malicious releases of MemTensor's MemOS OpenClaw plugin (npm) and MemoryOS (PyPI) deliver sckit, a cross-platform Go implant that steals 13 credential types and carries worm templates for npm, PyPI and GitHub Actions.