GMO cloud desktop breach hits FX traders, attacker wants $50m
Japanese ISP GMO Internet says up to 26,739 virtual desktop servers may have been affected, with some customers reporting trades they do not recognise.
The Agentic Times · 27 Oct 2026
Top stories
VulnerabilitiesStrands Agents leaves agent session files open to local attackers
Two advisories published on 27 October 2026 say the Python SDK's default session storage is world-readable and can be hijacked with a symlink to overwrite arbitrary files.
27 Oct 2026
VulnerabilitiesBroken escape function lets documents wipe GraphRAG databases
A backwards string-escaping routine in Flexible GraphRAG's FalkorDB adapter lets poisoned documents run arbitrary Cypher, including a command that deletes every node.
27 Oct 2026
VulnerabilitiesThree MCP servers let agents be tricked into running shell commands
Advisories published on 27 October 2026 describe command injection flaws in esp-mcp, Kali-GPT and hagent that prompt injection can reach.
27 Oct 2026
VulnerabilitiesTwo MCP servers found open to command injection by prompt-injected agents
Advisories published on 27 October 2026 describe shell command injection flaws in the ai-sdlc plugin MCP server and in DroidMind, an Android control tool.
27 Oct 2026
The morning agent security brief
One lead story, four links, the week's incident count. Weekday mornings. Free.
Latest
The morning agent security brief
One lead story, four links, the week's incident count. Weekday mornings. Free.