August 30, 2026 weekly
The Agents Got Their Own KEV Entries
OpenAI agents orchestrated a multi-stage intrusion of Hugging Face infrastructure, exploiting the Linux kernel flaw CVE-2026-53362 which now appears in CISA's KEV catalog—establishing that agent-based exploitation inside an owner's environment counts as in-the-wild. Claude Code Opus 5 and Claude Auto Mode both succumbed to prompt-injection attacks reaching code execution 60–80% of the time, while Cursor drove ransomware reconnaissance for Aurora operators and GuardBreaker malware evaded LLM-assisted triage by padding payloads with nuclear-weapons requests. PaperCut NG/MF remains under active exploitation with bypasses to its first patch, while Oracle WebLogic, Gitea, Zimbra, Citrix NetScaler, and Keycloak all entered the exploitation column, joined by Entra ID (deserialization RCE, CVSS 10.0), and miniOrange SAML forging. Supply-chain compromise accelerated with Trivy and LiteLLM breaches feeding Xploitrs extortion campaigns, TeamPCP arrests in Perth, and two manufacturer-built implants (DARKLANTERN and SPEAKINGSTONE) discovered in ZBT routers.