September 15, 2026
- A claimed Steam zero-day would let a local Windows user reach SYSTEM. @bet3rd posted a demonstration and says a PoC is available; a follow-up says Valve was notified in March but the HackerOne report was marked duplicate. There is no CVE, vendor advisory, or independent technical confirmation in the available reporting, so this remains an unverified disclosure. · Exploitation & Vulnerability Research
in Scope Questions Recast Anthropic’s “Rogue Agent” Incidents