[CVE-2026-49176]

September 15, 2026

• A WalletService-to-SYSTEM PoC is public for CVE-2026-49176. David Carliez’s write-up covers the local Windows privilege-escalation path; no active exploitation is claimed. · New Tools & Releases

in Scope Questions Recast Anthropic’s “Rogue Agent” Incidents

July 23, 2026

• CVE-2026-49176 — Windows WalletService to SYSTEM. Write-up and PoC published for a service-based LPE (David Carliez). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident