AI agents escaping tests: weak containment and AI Act limits
Experts say AI agent escapes stem from weak isolation and monitoring. New details on OpenAI and Anthropic, and the AI Act incident reporting deadlines.
5 min read
SiteGuard Server Edition: command injection exploited for root
CVE-2026-106931 in the statistics feature of the SiteGuard Server Edition WAF allows commands as root or SYSTEM and is exploited: versions and fixes.
5 min read
Chrome: a $250,000 exploit chain built with AI in six days
XBOW chained three Chrome zero-days to escape both sandboxes on Windows, using a public OpenAI model. The fixed version and what to do now.
4 min read
Anthropic: small AI models edging towards self-replication on IoT
Anthropic research shows open-weight AI models setting themselves up on IoT devices and spreading in a lab. Data, limits and defences for businesses.
6 min read
Cisco NX-API flaw CVE-2026-76471 also hits UCS 6300
According to INCIBE-CERT, the critical NX-API flaw in Cisco NX-OS also affects UCS 6300 Fabric Interconnects: fixed releases, conditions and what to do.
4 min read
Chrome VRP: Google raises rewards, but only partly
Google quadruples the base reward for Chrome memory bugs to $2,000 and pays up to $20,000 for the most severe ones. What changes for defenders.
4 min read
Ivanti Connect Secure: zero-day CVE-2026-104935 exploited
Authentication bypass with command execution in Ivanti Connect Secure, exploited since October 1: affected versions, attack chain and what to do.
5 min read
BlockStrap in Magento and Adobe Commerce: RCE via email templates
CVE-2026-103849 (CVSS 10) in the Magento and Adobe Commerce email template engine allows PHP code execution. Affected versions, patches and what to do now.
4 min read
October 2026 Patch Tuesday: over 1,400 flaws and priorities
A record 1,400+ Microsoft flaws: a WDAC bypass in .NET, SharePoint, 55 wormable bugs and end of support for Windows 11 24H2 Home and Pro. What to do.
5 min read
npm Trusted Publishing: SlugFest flaw exposed 1,500 packages
An abandoned GitHub repository name was enough to publish versions of more than 1,500 npm packages you do not own. GitHub’s fix and what to check.
5 min read
SAP October 2026 patches: CVSS 10 OAuth2 SSRF in Cloud SDK
SAP fixes CVE-2026-89111 (CVSS 10) in Cloud SDK for Python and three critical flaws in NetWeaver, S/4HANA and MII. Affected versions and what to do.
5 min read
TFG London: cyberattack hits Hobbs, Whistles and Phase Eight
IT systems offline and delayed orders at three British fashion brands owned by the Foschini Group. What is known, what is missing and what retailers should do.
5 min read
Windows Shell CVE-2026-96951: command injection exploited
CISA has added CVE-2026-96951 in Windows Shell, published on 13 October, to the KEV catalog: command injection, CVSS 8.8. Technical details and what to do.
4 min read
Danfoss AK-SM and AK-SC: compromises via exposed interfaces
CERT-FR reports numerous compromises of Danfoss AK-SM and AK-SC devices with their management interface exposed online. What the alert says and what to do now.
4 min read
GitLab CVE-2026-97229: Rapid7 reproduces RCE, 19.3 fix is 19.3.5
Rapid7 reproduced GitLab’s CVE-2026-97229 RCE and clarified its preconditions; on the 19.3 branch the fixed version is 19.3.5. What to do right now.
5 min read
GitLab 19.4.2: critical RCE CVE-2026-97229 in CI/CD regex
GitLab fixes 24 vulnerabilities in CE/EE, including CVE-2026-97229 (CVSS 10) in the CI/CD regular expression compiler. Affected versions and what to do now.
4 min read
Ledger: spy chip in CryptoBilis wallets, $93 million stolen
A hidden implant with eSIM and LTE modem in Ledger wallets sold by CryptoBilis reads the recovery phrase and sends it to attackers. Details and what to do.
5 min read
AI in SaaS and cloud: who bears the risk under vendor contracts
“As is” terms, liability caps, training on your data, DPAs and the Microsoft-OpenAI chain: what to check in AI service contracts.
6 min read
French supermarkets: Danfoss refrigeration sabotaged remotely
Forced defrost at 50 °C hit hundreds of French supermarkets through outdated or unpatched Danfoss controllers: what we know and what to do right now.
5 min read
Claude and real websites: Anthropic cuts internet from its tests
Injection on a university server, real forms submitted, tokens reused: the Claude cases, Anthropic’s countermeasures and what to do on exposed sites.
5 min read
ShinyHunters: ransom negotiator arrested in the US
A Canadian ransom negotiator faces extortion charges, and several outlets tie the arrest to the ShinyHunters probe. What we know and what to check.
5 min read
AhsayCBS: unpatched flaws exploited for web shells and XMRig
Two AhsayCBS flaws, an authentication bypass and a command injection, exploited with no patch, 10.3.4 included: web shells and XMRig. What to do now.
5 min read
Cisco ASA and FTD: exploited SSL VPN DoS, hot fix only
CVE-2026-20349 in Cisco Secure Firewall ASA and FTD: one HTTP request to the VPN portal reloads the firewall. Exploited, no workaround: apply the hot fix.
5 min read
MongoDB: fixes for the Go Driver and libmongocrypt (AV26-1024)
Canadian advisory AV26-1024: vulnerabilities in the MongoDB Go Driver before 2.9.2 and in libmongocrypt before 1.20.5. What to update and what to check.
5 min read
NetScaler CVE-2026-107406: SAML IdP at risk even after patching
Third critical advisory in three weeks for NetScaler ADC and Gateway: CVE-2026-107406 hits SAML even on freshly patched builds. Versions and what to do.
5 min read
North Korean IT workers: advisory from NZ’s NCSC and Police
How fake North Korean remote IT workers operate, the red flags on identity, access and payments, and the checks recommended by NCSC NZ and NZ Police.
5 min read
SharePoint CVE-2026-50522 exploited: patching is not enough
Critical RCE (CVSS 9.8) in on-premises SharePoint Server, exploited to steal IIS machine keys: the July patch is not enough, the keys must be rotated.
6 min read
Apache Struts CVE-2016-3081: DMI code execution added to KEV
CISA added Apache Struts CVE-2016-3081 to the KEV catalog: with DMI enabled it allows remote code execution. Affected versions, risks and what to do.
4 min read
ARTEX: agentic AI pentest tool used against South Korean banks
CrowdStrike shows how an attacker used ARTEX, an agentic pentesting tool, and several LLMs to steal data from South Korean banks. What to do right away.
5 min read
Cisco NX-OS: critical flaws in Nexus 3000 and 9000, and more
Critical NX-OS flaws allow root code execution on Nexus 3000 and 9000 with NX-API, NGOAM or MPLS OAM enabled. Cisco License, APIC and Meraki also patched.
5 min read
Flax Typhoon: Integrity Tech’s MicroScan and FishHub seized
FBI and DOJ seize seven domains behind MicroScan and FishHub, Integrity Tech tools used by Flax Typhoon. Exploited CVEs, techniques and what to check.
5 min read
ISC BIND CVE-2015-5477: TKEY query DoS added to CISA KEV
CISA has added ISC BIND CVE-2015-5477 to its KEV catalog: TKEY queries can make named exit. Affected versions, risks and what to do right now.
4 min read
AA26-281A advisory: Integrity Tech, Exchange, SoftEther, DCSync
Joint advisory from FBI, CISA, NSA, NCSC UK and partners: how actors linked to Integrity Tech steal email and credentials. Techniques, indicators, actions.
5 min read
Let’s Encrypt moves to 64-day certificates on February 10, 2027
From February 2027 Let’s Encrypt issues 64-day certificates, then 45 days in 2028. What changes for automated renewals and ARI, and what to check now.
5 min read
Midnight Mimosa: proxy and ad fraud in budget Android firmware
Bitdefender found Midnight Mimosa in the firmware of budget Android phones with MediaTek chips: ad fraud and residential proxies. Details and what to do.
5 min read
Nvidia DCGM Exporter: unauthenticated DoS (CVE-2026-47483)
CVE-2026-47483 (CVSS 8.2) in Nvidia DCGM Exporter: unauthenticated requests to /debug/pprof/ can crash GPU monitoring. Upgrade to version 4.8.2.
5 min read
ONLYOFFICE Docs CVE-2021-3199: exploited path traversal and RCE
CISA has added ONLYOFFICE Document Server CVE-2021-3199 to the KEV catalog: path traversal with RCE, CVSS 9.8. Affected versions and what to do.
5 min read
Post-quantum cryptography: Europol and the GAO sound the alarm
Europol and the US GAO urge organisations to speed up the move to post-quantum cryptography. What web data shows, its limits, and what to do now.
5 min read
ProFTPD CVE-2015-3306: mod_copy file access added to KEV
CISA has added ProFTPD CVE-2015-3306 to the KEV catalog: mod_copy lets remote attackers read and write files. Technical details and what to do now.
4 min read
Strapi CVE-2023-22894: sensitive data leaked via query filter
CISA has added Strapi CVE-2023-22894 to the KEV catalogue: the admin panel can reveal password hashes and reset tokens. Affected versions and what to do.
4 min read
UAC-0099 refines its MATCHBOIL downloader and uses ASHVEIN RAT
ESET traces two years of MATCHBOIL, the downloader UAC-0099 uses against Ukraine: obfuscation, anti-sandbox checks and changing persistence.
4 min read
Anthropic sets three tiers of Claude cyber access for defenders
Anthropic merges Project Glasswing and the Cyber Verification Program into three tiers with fewer blocks for vetted teams. What changes and what to do.
6 min read
AWS Strands Box: open source policy sandbox for AI agents
AWS releases Strands Box, an open source sandbox that restricts AI agents with policies based on what they have already done. How it works, limits, actions.
5 min read
Hijacked .gh, .sl and .as ccTLDs used to get Google certificates
Attackers altered DNS records in .gh, .sl and .as and obtained HTTPS certificates for Google and other domains. What to do: CT monitoring and CAA records.
4 min read
Cyber Resilience Act: Italy’s decree gives ACN market oversight
Italy’s draft Cyber Resilience Act decree makes ACN notifying and market surveillance authority. Obligations already in force, deadlines and next steps.
5 min read
LunexStealer spread via fake Cloudflare checks on 100+ sites
CERT-UA: over 100 compromised websites show a fake Cloudflare check that installs LunexStealer via ClickFix, BYOVD and a smart contract. What to do.
5 min read
PoeLLM: cryptomining botnet hides its C2 in a GitHub poem
PoeLLM has compromised over 3,400 LiteLLM, Ollama, Gotenberg and Gitea servers and derives its C2 address from a poem on GitHub. Details and what to do.
5 min read
Pwn2Own Ireland 2026: 98 zero-days; Galaxy S26, Pixel 10 hacked
In Cork, 98 zero-days and $1.26 million in prizes across phones, printers, smart home devices and AI tools. What to do while waiting for patches.
5 min read