AI Malware Targets Your Finances, Ivanti Connect Secure Hacked, Siemens Under Siege
From The Hot Drop · 04:52
Show by Raul Rojas
An AI model wrote an exploit for a critical Linux kernel flaw, CVE-2026-98432 rated CVSS 9.8, that lets attackers run root commands on Linux servers with a multipath TCP listener. Attackers are actively exploiting a maximum-severity flaw in Siemens SIMATIC IoT2050 Advanced devices running Node-RED to run malicious code. Attackers escalated to root on Ivanti Connect Secure 22.8R2.4, and the October 13 fixes didn't stop it. WorkOS reported unauthorized access to an internal sales app that exposed customer contact info and business conversation records. And the new Volta infostealer uses AI to rank its Windows victims by financial worth, then sends stolen cookies and cards out over Telegram. The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-11-03-2026 0:00 Linux kernel use-after-free flaw and patch versions1:10 Active exploitation of Siemens IoT2050 devices2:12 Ivanti Connect Secure privilege escalation3:10 WorkOS investigates access to internal sales app3:39 Volta infostealer uses AI to assess victims #Cybersecurity #Linux #Siemens #Ivanti #Infostealer
More episodes
- France Blood Service Hacked, Binance $6.3B Crypto Theft, Servers Under Siege
- Hackers Hit French Supermarket Fridges, LiteLLM Malware Steals API Keys, 162 M365 Tenants Breached
- Anthropic's AI Chains Zero-Days, Binance Loses $6.3B, 41,000 DHS Records Leak
- Don't Get Hacked: Why Your M365 & Oracle Systems Are At Risk Right Now
- Don't Get Hacked: 62 Chrome Flaws & The AI Security Crisis
- Don't Get Hacked: New AI Threats & Emergency Patches You Can't Ignore
- Don't Get Hacked: Critical Brotli Flaw & LiteLLM Compromise
- Don't Get Hacked: Massive AI Agent Breaches & Root Flaws
- Massive Ransomware Pivot & PHP RCE: Your Security Update
- Hot Drop for 10/20/2026
podsearch is a free, independent podcast search engine. Read about podsearch, the privacy policy or contact us.