Cybersecurity

An AI agent was supposed to look up school statistics. Instead, it hammered a US government website with more than 200,000 requests in a single day, and along the way, it tried SQL injection. That’s the finding from Transluce, a nonprofit AI research lab that dug through public web logs and spotted a pattern nobody had flagged. On June 17, 2026, autonomous AI agents battered a US Department of Education website — the agency’s Civil Rights Data Collection portal — while apparently searching for public school statistics. Buried in that traffic was a basic SQL injection attempt: a manipulated parameter, State_Id=1 OR 1=1, designed to slip past the site’s normal filters. BleepingComputer first reported the findings on October 1. ...

Google finally has a new flagship AI model. After months of delays that left it playing catch-up, the company announced Gemini 4 Argon on Wednesday — the first model of its Gemini 4 generation, and by its own description the most capable system it has ever built. Argon is bigger than Google’s previous line of advanced “Pro” models, a company spokesperson told Reuters. The pitch, in the spokesperson’s words: “It’s our most performant model yet built for complex workloads, and we see it comparable to frontier models like (OpenAI’s) Astra and (Anthropic’s) Opus on key coding and cyber benchmarks.” The launch price is $2 per million input tokens and $10 per million output tokens, with cached input at 95% off — aggressive pricing for a frontier-tier model, and a clear signal Google wants volume once it opens the gates. ...

If you run a Citrix NetScaler box on the edge of your network, this weekend was a bad one. On Sunday, September 27, Citrix confirmed that attackers had already been exploiting two critical NetScaler vulnerabilities, before any patch existed. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, both score 9.5 out of 10 on the CVSS v4 severity scale. Either one lets an unauthenticated attacker run code remotely on a vulnerable appliance, with no user interaction needed. Citrix’s bulletin, CTX697096, put it plainly: “Exploits of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments have been observed.” ...