Google says Gemini 4 Carbon leads three security tests, but two scores are self-reported and public independent results are not yet available.

• AI Espionage Team
• October 29, 2026

NebuSec says answering a Telegram call could help attackers compromise outdated Android phones. Telegram fixed the reported call-code bug in version 12.10.4.

• AI Espionage Team
• October 29, 2026

A weekly security roundup covers Fortinet fixes, rented Android banking malware, a malicious blank PDF, an Authenticator flaw and patch priorities.

• AI Espionage Team
• October 29, 2026

CISA lists CVE-2026-76418 in Cisco ASA and FTD software as actively exploited. The supplied advisory excerpt does not include fixes or impact details.

• AI Espionage Team
• October 29, 2026

CISA added CVE-2026-97229, an integer overflow in GitLab CE and EE, to its Known Exploited Vulnerabilities catalog. Key details remain limited.

• AI Espionage Team
• October 29, 2026

Dream Security says attackers used a PHP2Shell and kernel exploit chain to root 25 PAN-OS servers, including systems in a US government-affiliated environment.

• AI Espionage Team
• October 29, 2026

A researcher says a malformed WAP Push SMS can crash Android’s telephony process without user action; Google classified the report as not fixable.

• AI Espionage Team
• October 29, 2026

Alpine Linux says attackers tried to exploit a critical GitLab flaw. No successful access has been confirmed, but the project rebuilt its instance.

• AI Espionage Team
• October 29, 2026

A community report says Apple’s developer tools still trust compromised eMudhra certificates as of Oct. 28, despite a macOS update.

• AI Espionage Team
• October 29, 2026