← Wednesday 21 Octobernote 9 of 12
CybersecurityWed 21 Oct 2026 · 9 of 12

US Agencies Issue Ten Voluntary Practices for Rogue Super‑Intelligence Agent Incidents

Verified · 6/6 supported1 cited · 1 min read

securityweek.com reports that NIST, CISA and NSA released ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI (super intelligence) agent incidents . securityweek.com notes that the guidance, titled “Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation,” uses the term super intelligence (SI) rather than AI to align with executive order 14434 . securityweek.com explains that the ten practices are organized into five stages: prepare, detect, respond, recover, and report . securityweek.com adds that the report includes definitions for AI agents, AI control incidents, and AI control near‑misses . securityweek.com says the preparation stage lists activities such as asset and risk inventories, defense‑in‑depth, least privilege, zero‑trust controls, credential management, and supply‑chain risk management .

Why it matters. securityweek.com reports that the practices are intended to help the frontier SI industry prevent and rapidly respond to incidents where SI systems act unintentionally or without authorization, reducing potential existential risks .

Earlier on Cybersecurity

Tue 20 Oct 2026Drupal issues patches for critical RCE flaws in Entity List and Field UI modulessecurityweek.com reports that Drupal has released patches for five vulnerabilities, including two critical remote code execution bugs. securityweek.com reports that the first critical RCE bug (CVE-2026-108099) resides in the Entity List module and can be exploited via other contributed modules, with at least one unauthenticated exploit path. securityweek.com reports that the second critical RCE bug (CVE-2026-108097) affects the core Field UI module, also requiring contributed modules for exploitation, and that uninstalling the core Field UI module is a mitigation. securityweek.com reports that users should update to Entity List version 3.0.10 and to Drupal versions 11.4.10, 11.3.19, or 10.6.19, noting that older releases have reached end‑of‑life and no longer receive security updates. securityweek.com reports that the updates also fix cross‑site scripting issues in the core Link module (CVE-2026-108515) and the Navigation module (CVE-2026-108514).Tue 20 Oct 2026Siemens Software Center Vulnerability Exploited in ClickFix Malware Campaignsecurityweek.com reports that a vulnerability in Siemens Software Center (CVE-2026-110936) was exploited in ClickFix malware attacks. securityweek.com reports that attackers paired a legitimate, signed copy of the program with malicious DLLs to infect Windows PCs. securityweek.com reports that the flaw allows an authenticated local attacker to place a malicious DLL in searched folders, resulting in code execution with Software Center privileges. securityweek.com reports that Siemens disclosed the vulnerability on October 15, assigning it a CVSS v4 score of 8.4, and later released version 4.0.9.8 which resolves the issue. securityweek.com reports that the fix is delivered automatically on the next launch for installed users, and that the advisory initially omitted mention of active exploitation before a blog post was added.Sun 18 Oct 2026Israeli ad firm Discover-Tech used to deliver Candiru spyware in "AdFection" campaignsecurityweek.com reports that Israeli advertising company Discover-Tech was used to deliver Candiru zero‑click spyware through targeted advertisements. securityweek.com reports that the operation delivering the spyware was dubbed “AdFection”. securityweek.com reports that Candiru spyware infected devices at Al Jazeera via these zero‑click ad attacks, according to Citizen Lab. securityweek.com reports that Discover-Tech’s ads allowed threat actors to fingerprint, de‑anonymize, and track millions of devices, with its Controlium platform enabling large‑scale de‑anonymization. securityweek.com reports that the company is likely a front for a broader espionage campaign linking ad vendors with spyware providers.
Next · Climate techPermafrost Thaw Threatens Wainwright Infrastructure and Could Cost Billions →