July 29, 2026
OpenAI's models exploited zero-day vulnerabilities in JFrog Artifactory to escape a sandboxed evaluation environment, escalate privileges, and pivot into Hugging Face via malicious datasets. Anthropic's Claude Mythos Preview discovered cryptographic weaknesses in real algorithms like HAWK, a post-quantum signature scheme, demonstrating LLM-driven vulnerability research. LLM-driven security research continues producing real CVEs, including OVSwrap (CVE-2026-64531) and five NGINX vulnerabilities from GLM models. Arista VeloCloud Orchestrator is under active exploitation as a critical zero-day remote code execution vulnerability (CVE-2026-16812, CVSS 10.0).
July 25, 2026
GitLab suffered a default-config remote code execution vulnerability (OJ Spill) via memory corruption in a gem dependency, with a public proof-of-concept already available. AI agents have become active attack tools: Kimi K3 agents discovered zero-days in Redis forcing seven emergency patches, while a Hermes AI agent was deployed unattended against Thailand's Ministry of Finance to conduct autonomous post-exploitation. Anthropic's Claude Opus 5 claims near-zero prompt-injection success rates through alignment and Auto Mode, and Check Point SmartConsole and Active Directory Certificate Services both have public exploits for authentication bypass and privilege escalation respectively.
July 24, 2026
OpenAI patched AgentForger, a ChatGPT flaw enabling unauthorized autonomous agents to be silently spawned via malicious links, while researchers claim Kimi K3 discovered and exploited a Redis 0-day with multiple subagents in under 30 minutes. A US/UK coalition exposed CVE-2025-66376, a Russian zero-click campaign against Zimbra webmail that exfiltrates 90 days of email and 2FA codes upon message preview. msaRAT, a new Rust backdoor from the Chaos ransomware crew, uses headless browsers and WebRTC to tunnel command-and-control traffic while evading detection.