AI Malware Targets Your Finances, Ivanti Connect Secure Hacked, Siemens Under Siege

An AI model wrote an exploit for a critical Linux kernel flaw, CVE-2026-98432 rated CVSS 9.8, that lets attackers run root commands on Linux servers with a multipath TCP listener. Attackers are actively exploiting a maximum-severity flaw in Siemens SIMATIC IoT2050 Advanced devices running Node-RED to run malicious code. Attackers escalated to root on Ivanti Connect Secure 22.8R2.4, and the October 13 fixes didn't stop it. WorkOS reported unauthorized access to an internal sales app that exposed customer contact info and business conversation records. And the new Volta infostealer uses AI to rank its Windows victims by financial worth, then sends stolen cookies and cards out over Telegram.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-11-03-2026

0:00 Linux kernel use-after-free flaw and patch versions
1:10 Active exploitation of Siemens IoT2050 devices
2:12 Ivanti Connect Secure privilege escalation
3:10 WorkOS investigates access to internal sales app
3:39 Volta infostealer uses AI to assess victims

#Cybersecurity #Linux #Siemens #Ivanti #Infostealer