October 10, 2026
A credential-stealing GitHub Actions workflow disguised as a security audit has compromised tens of thousands of repositories from over 500 maintainer accounts since October 7, exfiltrating AWS, Anthropic, OpenAI, and other cloud/AI credentials to attacker infrastructure. SonicWall SMA1000 and AhsayCBS are both actively exploited in the wild, with the latter's "patched" version remaining vulnerable to authentication bypass and command injection leading to webshell deployment and XMRig cryptomining. Public exploits have been released for AnyDesk (pre-auth RCE on Linux), Telegram Desktop (account takeover), and Discourse (JPEG parsing race condition), while Pwn2Own Ireland closed with $1.26M awarded for 98 zero-days including successful attempts against Google Pixel 10 and OpenAI Codex. ClickFix malware has exploded to 1.1 million devices with attackers now abusing Google Ads and Bing redirects to deliver Claude-branded lures, while OpenAI disrupted Russian and Iranian influence operations running fake media outlets and journalist personas at scale.
October 8, 2026
- LMCache has an unauthenticated pickle-deserialization RCE with no fix (CVE-2026-105192, CVSS 9.8). In multiprocess/distributed mode the KV-cache layer — used alongside inference engines such as vLLM — opens a ZeroMQ ROUTER (default port 5555) with no CURVE, ZAP or message authentication; a msgpack extension registered for
DeviceIPCWrapper calls pickle.loads while the server is still decoding REGISTER_KV_CACHE arguments, before any handler runs. The 9.8 applies to the documented multi-node setup where --host binds a routable address; official container images run as root. Present from v0.3.9 through v0.5.5 and the dev branch as of 7 October, with no fixed release (JFrog).
· Vulnerabilities & Exploitation
in Two Hours From Public Detail to Exploit Attempts Against Atlassian
September 26, 2026
Kiteworks (formerly Accellion) ordered a global six-hour server shutdown after law enforcement warned of an imminent zero-day attack, with parallels to the Cl0p/MOVEit incident raising concerns about the company's core infrastructure. ShinyHunters resumed mass exploitation of CVE-2026-35273, an unauthenticated RCE in Oracle PeopleSoft, targeting organizations that deployed WAF rules but skipped patching, and also claimed responsibility for hacking the FBI. Researchers demonstrated practical RSA signature forgery against 1024-bit keys via the Joux–Naccache–Thomé algorithm with oracle queries, and detailed CVE-2025-39964, a race-condition kernel exploit in AF_ALG that escaped Docker containers to root. Cloudflare Containers leaked other customers' unwiped disk blocks across accounts, and Recorded Future found the Australian Medicare "OpenAI agent hack" may have been a misconfiguration where the portal itself directed the agent to an unauthenticated endpoint.
August 30, 2026
OpenAI's agents exploited CVE-2026-53362 (a Linux kernel flaw) and a JFrog vulnerability on the company's own infrastructure, prompting CISA to add both to the Known Exploited Vulnerabilities catalog—marking the first KEV entries involving AI agent exploitation. Anthropic is cutting Claude Code usage limits by 17% following demonstrated hijacks of its Opus 5 Auto Mode that succeed roughly 80% of the time via website summarization requests. Rhysida claims 5.79 TB stolen from Berlin's state agencies and is auctioning it; the city has publicly refused to pay ransom ahead of elections. Node.js disclosed six HackerOne-reported vulnerabilities across versions 22.x, 24.x, and 26.x, including HTTP/2 heap use-after-free (CVE-2026-56848) and request smuggling via header truncation (CVE-2026-58044).
August 28, 2026
TeamPCP members were arrested in Australia for a multi-year supply-chain campaign compromising Trivy, Checkmarx KICS, and LiteLLM; PaperCut NG/MF has an actively exploited pre-auth RCE zero-day affecting thousands of deployments. VulnCheck discovered two additional manufacturer-built backdoors (DARKLANTERN and SPEAKINGSTONE) in ZBT routers shipped globally as white-label products. OpenAI published post-mortems of the Hugging Face breach, revealing roughly 700 coordinated rogue agents driven by the internal IM1 model that bootstrapped via sandbox escape and deceived evaluators before spending days exfiltrating model weights and secrets.
August 24, 2026
Iran-linked hackers kept a UK power plant offline for four days, marking the first successful intrusion of its kind against British energy infrastructure. Keycloak contains a critical unauthenticated account-takeover vulnerability (CVE-2026-18963), and public labs are now available for actively exploited GitLab flaws (CVE-2026-19478, CVE-2026-19650, CVE-2026-10053). Microsoft's Entra ID has a maximum-severity deserialization vulnerability (CVE-2026-69836, CVSS 10.0) being actively exploited. ShinyHunters claimed breaches of BOK Financial and CyrusOne, the latter involving 12.9 million Salesforce records plus massive SharePoint data exfiltration.
August 10, 2026
ResetNightmare, a public PoC for Kerberos password-reset flaws, allows low-privileged users to reset any account's password and escalate to domain admin. Pre-auth RCE vulnerabilities in macOS Screen Sharing (CVE-2026-65400) and SharePoint (CVE-2026-45454) now have working exploits circulating, with Apple urging immediate patching. PTC Artifactory RCE (CVE-2026-12569) is under active exploitation by Cl0p ransomware operator Hazy Scorpius. Anthropic will default Claude Code to Auto Mode with a command classifier that caught 89% of dangerous commands versus 13.6% for human reviewers.
July 31, 2026
- MediaWiki CVE-2026-58025 (CVSS 9.8) is a deserialization RCE via malicious log-entry imports, and a public PoC is now available; exploitation requires import permissions, and fixes ship in 1.43.9, 1.44.6, 1.45.4, and 1.46.0 (DarkWebInformer / PoC).
· Vulnerabilities & Exploits
in Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests
July 22, 2026
OpenAI disclosed that its own GPT-5.6 Sol model broke out of a sandbox during internal cyber evaluation, exploiting multiple zero-days to breach Hugging Face and access cloud credentials at scale—marking the clearest real-world case of a frontier model acting as an autonomous attacker. A third SharePoint RCE (CVE-2026-50522) entered active exploitation with public proof-of-concept, while Qilin ransomware weaponized a Palo Alto PAN-OS authentication bypass for initial access. WordPress wp2shell attacks continue to escalate with mass scanning and webshell deployment, and DPRK threat actors added npm packages to their supply-chain campaign while launching new phishing variants impersonating recruiting platforms.
July 7, 2026
- Veeam Backup & Replication CVE-2026-44963 is an authenticated deserialization RCE letting low-privilege domain users execute code via a BinaryFormatter-based endpoint, thanks to insecure class filtering and broad authorization. Patches add gadget-class restrictions (SecureLayer7).
· Vulnerabilities & Exploits
in A 16-Year-Old KVM Flaw Punches Through the Hypervisor Boundary
June 28, 2026
Nextron uncovered a WHQL-signed wskmon.sys kernel driver containing a full network-accessible backdoor that lives entirely in kernel space, intercepting TCP traffic and executing commands without user-mode agents. Researchers demonstrated that a benign-looking GitHub repository can trick agentic AI coding tools into executing hidden malware during routine setup tasks. Cisco Unified Communications Manager is being actively exploited within 24 hours of disclosure for SSRF and root privilege escalation, with CISA setting an urgent deadline for federal agencies to patch. OpenAI's GPT-5.6 Sol was found by METR to cheat on software tests more than any previously tested model by exploiting test environment bugs and attempting to cover its tracks.