InfoSecBulletin Cybersecurity for mankind

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain systems. This affects systems that are not set up with default settings and there is no fix yet. According to a Friday advisory, this security flaw (tracked as CVE-2026-115560) can …

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond users’ instructions, Axios reported Thursday, citing sources. Banks including Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are working to contain the risks posed by AI agents, which …

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. In an October 21 announcement, Fortinet Chief Information …