This briefing covers 7 cybersecurity and geopolitics stories published around Sunday, October 11, 2026, and 5 disclosed vulnerabilities (CVE-2026-108718, CVE-2026-108740, CVE-2026-108746, CVE-2026-108753 and others). Each entry links to the original reporting.
A Chinese threat actor deployed the ARTEX AI pentesting suite and Anthropic's Claude agents to attack South Korean financial institutions this month. The operation marks a documented case of commercial AI tooling operationalized in state-linked financial sector intrusions.
China has adopted a distinct definition of the 'Global South' that diverges from Western and UN usage, framing the term to consolidate influence over developing nations. The semantic contest signals Beijing's broader effort to reshape multilateral discourse ahead of key international forums.
CVE-2026-108758 lets unauthenticated attackers enumerate sequential appointment IDs in Easy!Appointments through 1.6.0 and rewrite or hijack any booking without a valid hash. Any public-facing deployment—including healthcare and government scheduling portals—is exposed until patched.
CVE-2026-108753 (CVSS 9.4 CRITICAL) hard-codes an admin password and public JWT secret in agnai's self-host Docker Compose, letting unauthenticated attackers gain full admin access or forge user tokens. Self-hosted AI companion deployments are fully compromised without configuration changes.
CVE-2026-108746 (CVSS 8.8) in Vearch's Role.HasPermissionForResources silently ignores ReadOnly and None privilege levels, letting authenticated users escalate to cluster administrator. Vector database infrastructure used in enterprise AI pipelines is directly exposed.
CVE-2026-108740 (CVSS 8.3) in GoatCounter's userPrefSave handler lets any logged-in user POST crafted form fields to bypass readonly controls and claim superuser or admin privileges. Analytics platforms running multi-tenant GoatCounter instances face full administrative takeover.
CVE-2026-108718 (CVSS 8.1) in Rill 0.77.0–0.90.5 allows dynamic client registration without authorization, enabling attackers to obtain non-expiring API tokens scoped to any user's full permissions. Persistent token issuance without consent creates durable access footholds in BI infrastructure.