InfoSecBulletin Cybersecurity for mankind

Key Points: The UK’s AI Security Institute (AISI) tested OpenAI’s GPT-5.5 and found it can perform cyberattacks like Anthropic’s Claude Mythos Preview. GPT-5.5 is the second model, after Mythos, to fully complete a complicated enterprise attack test. This was done on a network without any active defenses. AISI sees this …

Wazuh has fixed a critical issue dubbed CVE-2026-30893 which is rated 9.0 on the CVSS scale allowing an authenticated cluster peer to write arbitrary files outside the intended extraction directory on other cluster nodes. This can be escalated to code execution in the Wazuh service context by overwriting Python modules …

FBI and CISA, along with the Department of Energy and defense partners, released a joint report. Called “Adapting Zero Trust Principles to Operational Technology,” this guide helps critical infrastructure operators protect industrial systems from today’s cyber threats. The new federal guidance strongly urges organizations to adopt an “assume breach” philosophy. This …