VoidLink malware was likely AI-generated.

Researchers say VoidLink is a sophisticated Linux malware likely authored largely with AI and developed using a Spec Driven Development workflow; GitLab fixed a high-severity two-factor authentication bypass (CVE-2026-0723) and two denial-of-service flaws; and Minnesota DHS notified about a vendor-related MnCHOICES data breach affecting ~304,000 people that exposed personal and Medicaid-related information.