Security Onion 3.4.0 Now Available including Agentic AI Automations!

CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could al…

Google dismantles 1.3 million-device Android botnet, bans TV box maker

Google and industry partners have disrupted XCPE, a botnet comprising more than 1.3 million devices, predominantly Android TV boxes. Google alleges that device manufacturer Videostrong deliberately installed the backdoor to profit from malware distribution, advertising fraud, and residential proxy services. Google has cut ties with the company and banned it, along with future subsidiaries and … The post Google disman…

VOLTA, the infostealer that asks an AI which victims are worth the effort

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is […]

SUSE Linux security advisory (AV26-1113)