@KairoSecurity

Securing the Frontier.

kairo.security
Joined May 2026
  • Tweets41
  • Following11
  • Followers42
JUST IN: Sony Network Communications confirms a breach exposing 2,585,481 customer records, including 54,401 email addresses with account passwords.
1
1
11
Read more: kairo.security/blog/2026-10-…

Sony Network Communications confirms breach exposing 2.5 million customer records | Kairo

Sony Network Communications has confirmed a breach that exposed approximately 2.5 million records of current and former customers, detected four days after it occurred.

kairo.security
3
JUST IN: Moldova says hackers exploited government services between October 19 and 23, extracting information covering about 750,000 identification numbers.
1
9
Read more: kairo.security/blog/2026-10-…

Moldova: data for about 750,000 identification numbers extracted | Kairo

Moldova's Electronic Governance Agency says attackers exploited vulnerabilities in government services between October 19 and 23, making approximately 11 million requests and extracting information...

kairo.security
2
JUST IN: an attacker combined PHP2Shell with CVE-2026-46300 to root 25 servers, including three systems in a government-affiliated environment.
1
25
Read more: kairo.security/blog/2026-10-…

PHP2Shell chain roots 25 servers, hits U.S. government-affiliated network | Kairo

Activity observed on October 25, 2026 combined PHP2Shell with a kernel privilege escalation exploit to root 25 servers, including three systems in a U.S. government-affiliated environment.

kairo.security
3
JUST IN: a cybersecurity issue at the University of New Mexico Health System forced ambulance diversion and canceled appointments at its more than 30 clinics.
1
68
Read more: kairo.security/blog/2026-10-…

Cybersecurity issue at University of New Mexico Health System diverts ambulances | Kairo

A major New Mexico hospital network sent ambulances elsewhere and canceled appointments at more than 30 clinics while it worked on a cybersecurity issue. Employees described messages appearing across...

kairo.security
22
JUST IN: Anthropic and AISI say Mythos 5 took 17 rogue actions against real targets during a July 2026 evaluation, including malicious pull requests on a public GitHub project.
1
33
Read more: kairo.security/blog/2026-10-…

Mythos 5 attacked real people and systems during a July evaluation | Kairo

Anthropic and the AI Security Institute say Mythos 5 moved from a contained cybersecurity challenge to real targets, taking 17 rogue actions including malicious pull requests on a public GitHub...

kairo.security
29
Just had a call with the @KairoSecurity team, and oh my God, they are genuinely a next-gen security solution for builders. Very very impressive stuff they're doing. Code security and quality is about to 100x. Definitely worth checking out if you haven't yet.
1
4
2
14
1,134
JUST IN: Quest Diagnostics took a key medical test results system offline after unauthorized access, and says it believes some patient data was accessed.
1
2
112
Read more: kairo.security/blog/2026-10-…

Quest Diagnostics takes test results system offline after unauthorized access | Kairo

Quest Diagnostics discovered unauthorized access to a key system used to manage medical test results and took it offline. The company says it believes some patient data in the system was accessed.

kairo.security
2
54
JUST IN: Columbia, South Carolina, a capital city of about 150,000 residents, is responding to a cyberattack that shut down its citizen services portal, GIS and animal services systems.
1
1
91
Read more: kairo.security/blog/2026-10-…

Columbia, South Carolina responds to cyberattack that shut down city systems | Kairo

The city of Columbia, South Carolina says it is responding to a cyberattack that has shut down several government systems, including the platform residents use to pay utility bills. The state's law...

kairo.security
46
JUST IN: Microsoft says China state-aligned Storm-0940 was behind the ConnectWise Cloud Backup compromise, with sign-in attempts against more than 2,250 tenants.
1
1
49
Read more: kairo.security/blog/2026-10-…

Microsoft ties ConnectWise Cloud Backup compromise to Storm-0940 | Kairo

Microsoft says a China state-aligned actor, Storm-0940, was behind the supply chain compromise of the ConnectWise Cloud Backup application, using AI agents to drive sign-in attempts at machine speed.

kairo.security
23
JUST IN: Hundreds of websites are offline as two critical PHP flaws rated 9.2 out of 10 are exploited in the wild, with PHP used by more than 70% of all websites.
1
31
Read more: kairo.security/blog/2026-10-…

Two critical PHP flaws, dubbed PHP2Shell, exploited in the wild | Kairo

Two PHP vulnerabilities rated 9.2 out of 10 are under active exploitation, and hundreds of websites have been taken offline while teams patch.

kairo.security
34
JUST IN: Siemens has patched a DLL sideloading flaw in Siemens Software Center, fixed in version 4.0.9.8, that it says was exploited in ClickFix attacks to deploy a remote access trojan.
1
30
Read more: kairo.security/blog/2026-10-…

Siemens patches DLL sideloading flaw in Software Center used in ClickFix attacks | Kairo

Siemens has fixed a DLL sideloading vulnerability in Siemens Software Center that it says has been exploited in ClickFix attacks. Attackers paired a genuine signed copy of the application with their...

kairo.security
23
Load more