What human hackers still do better than AI, according to HackerOne’s CEO
2026-11-03T08:51:42Z•8f4f3469abdb919180487fb1ff5b6243d550e572d44a6b9a3082ab0de559b4e7
CVE-2026-111357CVE-2026-111497CVE-2026-118527AI securityAndroid malwareBrotliHTTP2ShellIvanti Connect SecureMCPNode.jsOT securityVOLTA-AUTODOXERXCPEbotnetcryptocurrencycybersecurity newshardware walletinfostealerknown exploited vulnerabilitiesremote code executionretail attackssoftware supply chainsupply-chain compromisevirtual patchingvulnerability management
What happened
Help Net Security RSS roundup covering AI-assisted vulnerability discovery and bug bounty research, the critical HTTP2Shell/Brotli remote-code-execution vulnerability (CVE-2026-111497), deprecated MCP servers installed by AI coding agents, exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357 and CVE-2026-118527), the XCPE Android TV botnet, the VOLTA-AUTODOXER AI-assisted infostealer, attacks on supermarket refrigeration systems, and a suspected seed-stealing implant in some Trezor wallets. The highest-priority items are the actively exploited Ivanti vulnerabilities, critical HTTP2
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 8f4f3469abdb919180487fb1ff5b6243d550e572d44a6b9a3082ab0de559b4e7
- Enrichment time
- 2026-11-03T08:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.