Critical Atlassian Flaw, Google Freezes Bounties, Denmark 8.8M CPR Breach, and More

THN Daily Updates AI Agents Already Have Access. Here's How to Take Back Control AI agents are getting access to sensitive apps, data, and systems. Learn how to find hidden agents, control their access, and reduce risk before shadow AI becomes a security problem. Download Now Sponsored LATEST NEWS Oct 6, 2026 LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows befor... Read More Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, a... Read More Webinar | Stop Hardcoding. Start Governing: Developer Secrets and AI Agents Learn how to discover exposed developer credentials and manage AI agent access without slowing delivery. Read More Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterpr... Read More Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in th... Read More Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must ... Read More FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's acco... Read More Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization... Read More AI Agents Already Have Access. Here's How to Take Back Control AI agents are getting access to sensitive apps, data, and systems. Learn how to find hidden agents, control their access, and reduce risk before shadow AI becomes a security problem. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi