Latest
●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software●Researchers say 44 AI agents drove attacks on Japanese targets●New 'Aokigahara' stealer goes after AI assistant sessions●Warp discloses breach exposing AI agent logs and telemetry●Strands Agents leaves agent session files open to local attackers●Broken escape function lets documents wipe GraphRAG databases●Three MCP servers let agents be tricked into running shell commands
Wednesday, 28 October 2026
1 agent hack today▼ 9 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

AI agent finds four severe flaws in EPICS industrial control software

An autonomous AI hacking agent called Cipher discovered four previously unknown vulnerabilities, including a critical 9.8 CVSS remote-code-execution flaw, in the EPICS industrial control toolkit used by around 90 scientific and industrial facilities worldwide, prompting a CISA advisory and a patched release (7.0.11).

Disclosed 27 October 2026 · Record updated 27 October 2026

Impact

Four vulnerabilities (CVE-2026-114595 to -114598) found in EPICS Base could allow remote code execution, denial-of-service, memory corruption or information disclosure on control systems used in particle accelerators, fusion reactors and SCADA systems; no exploitation in the wild reported, patch released.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/10/27/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours/5305811