[CVE-2026-20685]

August 14, 2026

• Apple paid a $150,000 bounty for a prompt-injection attack against Private Cloud Compute (CVE-2026-20685). The writeup goes "beyond prompt injection" into hacking Apple's confidential-compute AI backend. (Sentry Security) · AI & Model Security

in vCenter Under Active Exploitation: Critical RCE Weaponized for Reverse-SSH Persistence Across 47 Countries