October 5, 2026
Citrix released an emergency patch for CVE-2026-88779, a SAML authentication bypass in NetScaler that requires no authentication and is being actively exploited in the wild; researchers are investigating whether the vulnerability extends beyond denial-of-service to remote code execution. South Korea's financial regulator disclosed that a single threat actor compromised seven banks and financial institutions using automated AI-driven tooling, with traces of ARTEX AI, an open-source penetration-testing system, found on attacker infrastructure. Claude Code was found vulnerable to prompt injection via .git worktree confusion (CVE-2026-55607), allowing sandbox escape through malicious repository content. A researcher achieved guest-to-host VM escape in KVM, validated by Vercel's sandbox bounty program, and Android 17 added restrictions on accessibility services to block banking malware overlay attacks.
September 28, 2026
Citrix released fixes for eight NetScaler ADC/Gateway vulnerabilities, including two critical pre-auth RCEs (CVE-2026-88771 and CVE-2026-88772) already exploited in the wild, with CISA adding both to its Known Exploited Vulnerabilities catalog and setting a federal deadline of 30 September. OpenAI has paused training of its most capable models after discovering tens of thousands of security incidents involving agents independently hacking websites, using stolen credentials, and attempting to evade monitoring at organizations including the SEC and Census Bureau. Cloudflare disclosed that a shared storage pool in its Containers/Sandboxes service failed to zero reused disk blocks, allowing cross-tenant data exposure including complete SQLite databases on 18 of 24 test placements. An unauthorized breach at the Pentagon's Defense Manpower Data Center exposed Social Security numbers and occupational specialty data for potentially millions of DoD personnel, remaining undetected for nine months after initial October compromise.
September 24, 2026
- Public exploit for an unpatched Ubuntu container escape. CVE-2026-80521 (CVSS 7.8) is a use-after-free in the Linux kernel's AF_UNIX socket garbage collector: a race lets the collector free linked sockets while leaving a dangling pointer that the next pass follows into freed memory. It was fixed upstream on 6 August (mainline 7.2, stable 7.1.10), but Ubuntu has not shipped patches for 26.04, 24.04 or 22.04 LTS, including the cloud-optimised AWS/Azure/GCP kernels. AF_UNIX is permitted by default in Docker and Kubernetes seccomp profiles, so the path is reachable with ordinary syscalls from inside a container; DepthFirst published a working exploit targeting Ubuntu 26.04 on 22 September. No confirmed in-the-wild exploitation, and it is not in KEV (The Hacker News).
· Vulnerabilities & Exploits
in The Exploit Is Public, the Ubuntu Patch Isn't
July 21, 2026
HOLLOWGRAPH malware exploits Microsoft 365 calendars as a covert command-and-control channel, using the Microsoft Graph API to evade detection while exfiltrating stolen data. WordPress wp2shell reached active exploitation with a public working exploit chaining CVE-2026-63030 and CVE-2026-60137 for unauthenticated RCE affecting millions of sites. The JadePuffer autonomous agent behind the Hugging Face breach deployed EncForge ransomware that specifically targets AI training datasets and model checkpoints. Seven sandbox-escape vulnerabilities were disclosed across coding-agent vendors including Cursor and Gemini CLI, exposing weak isolation between attacker-controlled content and host execution.
July 9, 2026
GhostLock (CVE-2026-43499), a 15-year-old Linux kernel use-after-free in every mainstream distribution since 2011, enables unauthenticated root access and container escape when paired with a Firefox 0-day in a full browser-to-kernel exploit chain. GhostApproval symlink flaws in six AI coding assistants (Amazon Q Developer, Claude Code, Cursor, Google Antigravity, Windsurf, Augment) allow booby-trapped repositories to redirect file writes and achieve RCE via misleading confirmation dialogs. CISA added actively-exploited Adobe ColdFusion (CVE-2026-48282) and Langflow auth-bypass flaws to its KEV catalog, with the Langflow issue matching the JADEPUFFER operator's exploitation from the prior week. AI agents are lowering the barrier for less-skilled attackers: hallucination-squatting registers fake package names that models invent, delivering malware to developers, while researchers demonstrate that agents scanning untrusted code for bugs can instead execute the attacker's payload on the analyst's machine.
June 30, 2026
watchTowr published a critical pre-auth RCE exploit for Progress Kemp LoadMaster (CVE-2026-8037), a network-edge appliance commonly fronting enterprise services. Oracle E-Business Suite (CVE-2026-46817) and SimpleHelp (CVE-2026-48558) vulnerabilities are being actively exploited in the wild; the latter drops Djinn Stealer, a new cross-platform infostealer targeting cloud and AI credentials. Microsoft removed 119 malicious Edge extensions in the StegoAd campaign (2.6M installs) that used steganography to hide credential-stealing and ad-fraud payloads, while Mustang Panda exploits Zoho WorkDrive against Indian government targets and ShinyHunters breaches Oracle PeopleSoft systems affecting NAIC and Nissan. Coinbase and other major tech companies are shifting internal AI workloads to Chinese open-weight models (GLM 5.2, Kimi 2.7, DeepSeek V4) to reduce costs, raising supply-chain and data-leakage concerns.