[vercel]

October 28, 2026

• VerCellBreak defeats Vercel Sandbox egress whitelisting without the sandbox ever talking to the attacker: a hijacked agent presents a forged mTLS client certificate whose AIA extension URL encodes the data, and the trusted whitelisted server fetches that URL itself while building the chain. Four conditions must hold — whitelisted egress, a controlled agent, a whitelisted domain requiring mTLS, and a server that resolves AIA. AIR Security disclosed it on 12 October and has no evidence of in-the-wild use (NSFOCUS). · AI & Agent Security

in Pre-Boot RCE in EDK2 Breaks Cover Months Before Its Disclosure Date

October 15, 2026

• Vercel’s sandbox challenge uncovered an upstream Linux kernel zero-day. Across 1,285 reports submitted over two weeks, Vercel paid $242,000 and confirmed a bug that leaked host memory from production sandboxes. Host crashes and code execution were demonstrated only on matching laboratory KVM and Firecracker systems; fixes remain under private review and CVEs are pending. This expands yesterday’s challenge finding (earlier coverage). Vercel · Vulnerability Research

in A Crafted Attachment Can Root Cisco’s Secure Email Gateway

October 14, 2026

• A network-filtering flaw in Vercel Sandbox gives agents a data-egress path. AI security startup AIR found agents could abuse certificate-validation handling to transmit data outside approved networks — an escape from the isolation layer that agent platforms depend on (The Record). · AI & Model Security

in Three Chained Zero-Days Put Root on a Fully Patched Ivanti VPN

October 5, 2026

Citrix Names the NetScaler SAML Zero-Day and Ships an Emergency Patch

Citrix released an emergency patch for CVE-2026-88779, a SAML authentication bypass in NetScaler that requires no authentication and is being actively exploited in the wild; researchers are investigating whether the vulnerability extends beyond denial-of-service to remote code execution. South Korea's financial regulator disclosed that a single threat actor compromised seven banks and financial institutions using automated AI-driven tooling, with traces of ARTEX AI, an open-source penetration-testing system, found on attacker infrastructure. Claude Code was found vulnerable to prompt injection via .git worktree confusion (CVE-2026-55607), allowing sandbox escape through malicious repository content. A researcher achieved guest-to-host VM escape in KVM, validated by Vercel's sandbox bounty program, and Android 17 added restrictions on accessibility services to block banking malware overlay attacks.

August 8, 2026

• Amazon, Cursor, Microsoft, OpenAI, and Vercel launched Agent Plugins, an open standard defining a single package format for AI agent extensions; v1.0.0 uses a plugin.json manifest and supports both agent skills and MCP servers. The Decoder (discussion) · Industry & Policy

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

August 7, 2026

• AWS, Google, and Vercel patched agent-infrastructure flaws that let untrusted or forged instructions reach an agent's tools with no check that a model turn authorized them — in several paths the model never ran at all, so system prompts and content filters never fired. The Hacker News · AI & Model Security

in Meta Becomes the Fourth Lab to Admit Its AI Hacked a Stranger

July 19, 2026

• 251 Vercel personal access tokens allegedly leaked on an underground forum, with sample vcp_-prefixed tokens and a download link posted; if valid and live they'd grant access to deployments, serverless functions and project configuration (DailyDarkWeb). · Cloud, Identity & Supply Chain

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation