Sunday, October 4, 2026

TLDR

Mythos-assisted Rejetto HFS exploit now being used in the wild (CVE-2026-61500, CVSSCommon Vulnerability Scoring SystemA standard 0 to 10 severity score: 0.1–3.9 low, 4.0–6.9 medium, 7.0–8.9 high, 9.0–10 critical.FIRST ↗ 9.8) — exploitation detected Oct 1 after a Sep 26–30 PoCProof of conceptPublic exploit code that shows a vulnerability can actually be triggered.FIRST ↗ and write-up (Oct 1–3) Security
Google freezes product-bug submissions to its open-source bug bounty after an AI-generated report flood (Oct 1) Security Open Source
Google cuts free Gemini app users to Flash-Lite only from Oct 9; AI Plus loses Pro (reported Oct 3–4) Pricing
8th Circuit temporarily blocks Minnesota's AI "nudification" ban pending xAI's appeal (Oct 2) Policy

Things your engineering team should look at or do this week.

Upgrade any Rejetto HFS instance to 3.2.1+ (versions 3.0.0–3.2.0 are affected, patch has existed since Jul 13) and check logs for unauthenticated session-cookie abuse since Oct 1.
Check whether your team relies on Gemini's free app tier for internal use before Oct 9; move those users to a paid plan or another model. The consumer change doesn't appear to cover the API, but confirm.
If you maintain open-source projects with Google OSS VRP exposure, or run your own bounty/disclosure intake, add triage rules for AI-generated reports (require a working PoC).

Rejetto HFS CVE-2026-61500 (published Jul 13; exploitation Oct 1) Agents — Predictable session-cookie signing keys (weak Math.random() PRNG plus leaked values in login responses) allow auth bypass and RCERemote code executionA flaw that lets an attacker run malicious code on a target's computers or network.Cloudflare ↗. Anthropic's restricted Mythos model (via Project Glasswing) spotted the weakness and suggested a Z3-based key recovery; Horizon3 weaponized it. VulnCheck saw in-the-wild attacks Oct 1, more Oct 2. Fixed in 3.2.1. (Write-up: WindowsForum; original coverage via The Register, Oct 3, not directly retrievable)
Google pauses OSS VRP product-vulnerability submissions (Oct 1) Open Source — Halted because maintainers were drowning in invalid, AI-generated reports; update expected Q1 2027. Reports filed before Oct 1 are still processed and supply-chain reports remain open. (Tom's Hardware)

Google: free Gemini app tier limited to Flash-Lite (effective Oct 9; reported Oct 3–4) Pricing — Free users lose Flash and Pro; AI Plus subscribers lose Pro but keep Flash. Consumer tiers only; coverage doesn't mention API changes. (Android Headlines)

Eighth Circuit pauses Minnesota "nudification" ban (Oct 2) Policy — Temporary stay while xAI appeals a lower-court ruling that had upheld the statute. Relevant if you ship image-generation features in the US. (Law360)