[CVE-2026-84115]

September 4, 2026

• A public exploit shipped for Cleo Harmony CVE-2026-84115, a JWT manipulation flaw giving authentication bypass and privilege escalation; fixed in 5.8.1.11 (SecurityWeek). Cleo MFT gear has a history of being an initial-access favourite (earlier coverage). · Exploitation & Vulnerabilities

in Malware That Gaslights the AI Analyst

September 2, 2026

• Cleo Harmony CVE-2026-84115, an auth bypass in a product with a long ransomware-target history, has been reproduced by watchTowr (@watchtowrcyber). Internet-facing installs should be treated as a same-day problem. · Exploited in the Wild

in OpenAI Says Astra Crossed the Line: Autonomous Zero-Day Discovery at "Critical" Cyber Risk