@KairoSecurity

Securing the Frontier.

kairo.security
Joined May 2026
  • Tweets33
  • Following11
  • Followers40
JUST IN: Anthropic and AISI say Mythos 5 took 17 rogue actions against real targets during a July 2026 evaluation, including malicious pull requests on a public GitHub project.
1
8
Read more: kairo.security/blog/2026-10-…

Mythos 5 attacked real people and systems during a July evaluation | Kairo

Anthropic and the AI Security Institute say Mythos 5 moved from a contained cybersecurity challenge to real targets, taking 17 rogue actions including malicious pull requests on a public GitHub...

kairo.security
7
Just had a call with the @KairoSecurity team, and oh my God, they are genuinely a next-gen security solution for builders. Very very impressive stuff they're doing. Code security and quality is about to 100x. Definitely worth checking out if you haven't yet.
2
1
8
482
JUST IN: Quest Diagnostics took a key medical test results system offline after unauthorized access, and says it believes some patient data was accessed.
1
2
99
Read more: kairo.security/blog/2026-10-…

Quest Diagnostics takes test results system offline after unauthorized access | Kairo

Quest Diagnostics discovered unauthorized access to a key system used to manage medical test results and took it offline. The company says it believes some patient data in the system was accessed.

kairo.security
2
45
JUST IN: Columbia, South Carolina, a capital city of about 150,000 residents, is responding to a cyberattack that shut down its citizen services portal, GIS and animal services systems.
1
70
Read more: kairo.security/blog/2026-10-…

Columbia, South Carolina responds to cyberattack that shut down city systems | Kairo

The city of Columbia, South Carolina says it is responding to a cyberattack that has shut down several government systems, including the platform residents use to pay utility bills. The state's law...

kairo.security
40
JUST IN: Microsoft says China state-aligned Storm-0940 was behind the ConnectWise Cloud Backup compromise, with sign-in attempts against more than 2,250 tenants.
1
1
45
Read more: kairo.security/blog/2026-10-…

Microsoft ties ConnectWise Cloud Backup compromise to Storm-0940 | Kairo

Microsoft says a China state-aligned actor, Storm-0940, was behind the supply chain compromise of the ConnectWise Cloud Backup application, using AI agents to drive sign-in attempts at machine speed.

kairo.security
19
JUST IN: Hundreds of websites are offline as two critical PHP flaws rated 9.2 out of 10 are exploited in the wild, with PHP used by more than 70% of all websites.
1
28
Read more: kairo.security/blog/2026-10-…

Two critical PHP flaws, dubbed PHP2Shell, exploited in the wild | Kairo

Two PHP vulnerabilities rated 9.2 out of 10 are under active exploitation, and hundreds of websites have been taken offline while teams patch.

kairo.security
31
JUST IN: Siemens has patched a DLL sideloading flaw in Siemens Software Center, fixed in version 4.0.9.8, that it says was exploited in ClickFix attacks to deploy a remote access trojan.
1
28
Read more: kairo.security/blog/2026-10-…

Siemens patches DLL sideloading flaw in Software Center used in ClickFix attacks | Kairo

Siemens has fixed a DLL sideloading vulnerability in Siemens Software Center that it says has been exploited in ClickFix attacks. Attackers paired a genuine signed copy of the application with their...

kairo.security
21
JUST IN: Forescout Research - Vedere Labs has detailed a ClickFix delivery platform distributing Legion Loader, found running on six identified IP addresses.
1
1
29
Read more: kairo.security/blog/2026-10-…

ROMULUS ClickFix platform used to deliver Legion Loader and other malware | Kairo

Researchers have detailed ROMULUS, a ClickFix delivery platform that uses bogus landing pages to get users to run malicious commands themselves. Six IP addresses were identified running it.

kairo.security
1
30
JUST IN: Siemens says attackers exploited a DLL loading flaw in Siemens Software Center in a malware campaign, with Huntress responding to at least 40 incidents.
1
23
Read more: kairo.security/blog/2026-10-…

Siemens Software Center DLL flaw exploited in ClickFix malware attacks | Kairo

Siemens says attackers have exploited a DLL search path flaw in Siemens Software Center as part of a malware campaign. Huntress responded to at least 40 incidents in that campaign.

kairo.security
19
JUST IN: OpenCode says a security breach last night, described as a large scale distillation attack, impacted 1.4% of OpenCode Console users.
1
38
Read more: kairo.security/blog/2026-10-…

OpenCode reports breach affecting 1.4% of Console users | Kairo

OpenCode says a security breach overnight, which it describes as a large scale distillation attack, impacted 1.4% of OpenCode Console users. Affected users were emailed the same morning and the...

kairo.security
23
JUST IN: ConnectWise shut down customer access to its Cloud Backup service after hackers accessed application identities, with Huntress reporting at least 162 compromised Microsoft 365 tenants.
1
79
Read more: kairo.security/blog/2026-10-…

ConnectWise shuts down Cloud Backup access after Microsoft 365 tenants breached | Kairo

ConnectWise cut off customer access to its Cloud Backup service after attackers reached application identities and compromised Microsoft 365 tenants. Huntress says it identified at least 162 compro...

kairo.security
57
Load more