cyber.hendryadrian.com
YouTube · Security Now

Security Now: Urgent Patching, AI-Assisted Research and Meta Data Exposure

· 2:50:16 · Watch on YouTube ↗

Summary

Security Now discusses actively exploited network-device flaws, an Australian infrastructure compromise, AI-assisted vulnerability research and reported internal exposure of Meta employee data.

Key points

  • CISA directed federal agencies to patch or mitigate three actively exploited UniFi OS flaws and separately ordered urgent patching of a Cisco Unified Communications Manager flaw.
  • ASIO said state-sponsored hackers accessed an Australian critical infrastructure provider, acquired user credentials and appeared to be preparing for sabotage. Remediation was ongoing.
  • OpenAI and Trail of Bits described Patch the Planet, an initiative combining AI-assisted vulnerability discovery with human validation, patch development and coordinated disclosure.
  • The initiative reported finding a local privilege-escalation vulnerability in OpenBSD and producing proof-of-concept exploits for Linux kernel issues; some details remained under coordinated disclosure.
  • Wired reported that employee activity data collected by Meta for AI training was internally exposed. Meta said it had no indication of improper employee access and paused the collection program while investigating.
  • Steve Gibson recommended automatic updates for internet-facing systems and discussed the operational tradeoffs of patching without rebooting.

Article Details

Topics
  • [13:05] Windows 10 extended security updates
  • [22:44] Actively exploited UniFi OS vulnerabilities and automatic updates
  • [25:57] Cisco patching deadline and reboot-free update tradeoffs
  • [45:46] Australian critical infrastructure compromise
  • [50:10] Patch the Planet and AI-assisted vulnerability research
  • [01:17:02] Meta employee monitoring and internal data exposure

Vendors

CiscoCisco released security updates for a Unified Communications Manager vulnerability that was later actively exploited.UbiquitiThe vendor released updates for three UniFi OS vulnerabilities that CISA reported as actively exploited.

Products

DaybreakOpenAI's system supports the Patch the Planet initiative's AI-assisted security research and remediation work.Mozilla Firefox[01:07:58] OpenAI identified a WebAssembly vulnerability that the transcript says Mozilla patched before Pwn2Own Berlin.Ubiquiti UniFi OSCISA reported active exploitation of three flaws involving access control, path traversal and command execution.

Countries

AustraliaASIO reported that state-sponsored hackers compromised an Australian critical infrastructure provider and acquired user credentials.

Related Articles