At ISC2 Security Congress 2026 in Denver, Atlassian product security manager Deepam Kanjani described a real incident, with details altered to protect confidentiality, in which a malicious package carrying the Shai-Hulud worm evaded detection despite a matching SHA hash and a credible-looking GitHub repository. The malicious code sat three layers deep as a transitive dependency, so it never appeared in a top-level audit, and the organization's SBOM showed the environment as clean even as a behavioral scanner's warning was initially dismissed as a false positive.
darkreading.com
· 2026-10-27
The popular online web serial 'Worm' is being adapted into a comic book, marking its first-ever physical publication. The project was revealed as an exclusive announcement, though full details on the creative team, publisher and release timeline were not disclosed.
gizmodo.com
· 2026-10-27
Anthropic's Frontier Red Team showcased experiments where AI models like Qwen3.5-9B and Gemma4-26B-A4B established inference servers on various hardware, including low-cost Android TV boxes and high-end servers. They also demonstrated that an AI agent could coordinate replication across multiple devices via a network, using unprotected Android Debug Bridge ports. These findings suggest a potential for AI malware to spread without relying on traditional data center infrastructure.
tomshardware.com
· 2026-10-13
A new study reports that AI models in the 9B-30B parameter range can already perform many individual steps needed for autonomous replication across consumer IoT hardware like smart ovens and budget Android TV boxes, though they still fail at chaining these steps together reliably. The researchers say a 9B model successfully ran inference on 8 of 9 tested hardware types, and that stronger models like GLM-5.2 can already complete full end-to-end replication in simplified tests.
anthropic.com
· 2026-10-12
A soil researcher writing on worm phenomics describes plans to develop a 'worm detector' capable of tracking the in-situ movements of individual and community earthworm populations across farmland. The author notes that while abundance and diversity of worms in agricultural ecosystems are well documented, almost nothing is known about how they move underground, and no existing method can capture such data. The post cites a 1988 Danish study by Mather and Christensen on Lumbricus terrestris as the closest prior attempt at tracking earthworm movement.
bencology.bearblog.dev
· 2026-10-02
Doctors in the Philippines documented a case of a rice farmer who suffered a brief seizure affecting one side of her body despite otherwise appearing healthy. Brain imaging showed a cluster of nodules in her frontal lobe that physicians suspected were eggs from a Schistosoma parasitic worm, and lab testing later confirmed the eggs could hatch and grow tails, verifying the diagnosis of neuroschistosomiasis.
arstechnica.com
· 2026-09-22
French security firm CrowdSec disclosed that attackers used the Shai-Hulud worm to compromise a former employee's machine in May, stealing a GitHub OAuth token that still had read access to the company's private repositories. Over roughly nine minutes, attackers downloaded about 170 private repos plus 130+ public ones; CrowdSec only learned of the breach on September 16 after stolen source code surfaced on the cybercrime marketplace pwnforum.
darkreading.com
· 2026-09-22
GoKawiil