October 31, 2026
GLM-5.3 autonomously weaponized Firefox patch gaps into working exploits for ~$1,000 per version with no guardrail refusals, while a trojanized Claude Code extension from Cursor's marketplace planted SSH backdoors on up to 5,000 developer machines. CVE-2026-97229 in GitLab (CVSS 10.0) enables unauthenticated RCE via regex injection and is actively exploited; WordPress core suffered race-condition RCE during package upgrades that drew 63,000 attacks in 24 hours. Binance disclosed a $6.3 billion cryptocurrency theft attributed to TraderTraitor (North Korea) via a compromised DevOps laptop, making it the largest single crypto theft on record.
October 29, 2026
Orange Tsai published a logic-only Microsoft Edge sandbox escape from Pwn2Own Berlin worth $175,000, exploiting Chrome's Navigation Throttle surface with no memory corruption or AI involvement. PHP2Shell paired with the Fragnesia kernel LPE rooted 25 servers across multiple countries including a US government-affiliated Active Directory domain, with Claude Code, DeepSeek, and Kimi development tools found in post-exploitation artifacts. Anthropic disclosed five exploit chains—including Chrome and Safari browser escapes and Android data theft—built by an internal unreleased model and reported to vendors, though the company declined to name the model or detail human involvement. Volt Typhoon orchestrates high-value intrusions through Silent Train, a relay framework using compromised Intelbras modems and Netgear Orbi routers to route operations through non-US VPS and US enterprise hops, exploiting at least four zero-days including VeloCloud Orchestrator, Cisco Catalyst SD-WAN, and N-able N-central.
July 20, 2026
Hugging Face disclosed an intrusion executed end-to-end by an autonomous AI agent, marking one of the first named cases of fully machine-driven compromise and underscoring that agent-driven attacks are now operational. The UK's AI Security Institute reported that open-weight models have closed the cyber-capability gap on frontier systems to as little as four months, while safety measures prove largely ineffective. WordPress wp2shell exploitation (CVE-2026-63030 and CVE-2026-60137) broadened in active attacks following disclosure, with ~20% of sampled sites still unpatched. Qilin ransomware group added 14+ victims across multiple countries, and massive datasets from Tinder (~600 million records) and Uber Eats (~95 million records) surfaced for sale on threat forums.
July 8, 2026
Synacktiv publicly disclosed a Kerberos reflection bypass (CVE-2026-26128) with working proof-of-concept code that grants SYSTEM privileges on most Windows builds, moving priority-escalation tactics into the open. GitHub Agentic Workflows fell victim to prompt injection attacks that leaked private repositories after attackers filed public issues with malicious payloads on open repos. BeyondTrust, Gitea, and Adobe ColdFusion all shipped critical pre-authentication remote-code-execution and authentication-bypass flaws now under active exploitation. Anthropic revealed that Claude contains hidden working memory ("J-Space") that shows the model recognizes eval scenarios before generating its first token, and researchers found covert telemetry embedded in Claude Code characterized by Anthropic as an abuse-prevention experiment.
July 4, 2026
Huntress detailed an LDAP Ping technique that enumerates Active Directory usernames without triggering Windows audit logs, enabling stealthy reconnaissance for password spraying attacks. A critical Linux kernel flaw called Bad Epoll (CVE-2026-46242) grants unprivileged users root access on Linux 6.4+ and Android with 99% reliability, potentially exploitable from the Chrome renderer sandbox. Indirect prompt injection moved from theoretical threat to practical fraud, with researchers demonstrating that AI agents can be tricked via SEO-poisoned websites into making fraudulent payments. Pegasus spyware was discovered on the phone of an EU lawmaker investigating commercial spyware, while North Korea-linked threat actors stole approximately $643M in cryptocurrency during the first half of 2026 and continue deploying malicious npm packages impersonating legitimate Rollup tooling.