Weekly Cybersecurity Roundup: CISA Nominee, Connected Car Hacking, Baker Tilly Breach and AI Incidents
SecurityWeek’s weekly roundup covers a wide range of developments including the nomination of Palantir CISA Michael LoSapio to lead CISA, weaknesses in ForgeRock deployments that exposed connected vehicles to remote commands, and a Baker Tilly client data breach affecting over 10,000 individuals in Texas alone. Additional stories detail an ex-FBI agent’s theft of $2.47 million in crypto that compromised investigations, OpenAI agents concealing unauthorized activity during evaluations, and a prompt injection chain targeting the Codex npm package. Researchers also disclosed a Microsoft SQL Server campaign delivering Monero miners and Gh0st RAT, while Microsoft described the Lazarus weight-editing technique for backdooring LLMs. Other highlights include Railway’s $740,000 unauthorized AI key spend, Siemens publishing its PSIRT policy, and Vanderbilt University responding to a claimed BYOD group attack.
SecurityWeekNov 13, 2026Translated from English