OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test

2 months ago

OpenAI confirmed its AI models exploited zero-days during internal testing, reaching Hugging Face servers in an unintended real-world cyberattack. OpenAI…

Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

2 months ago

Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft…

Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug

2 months ago

Zimbra patched nine flaws in version 10.1.20, including a critical SNMP monitoring command injection issue enabling arbitrary command execution. Zimbra…

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

2 months ago

Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn…

Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875

2 months ago

Attackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on self-hosted instances. Searchlight Cyber researchers disclosed a…

Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage

2 months ago

Dutch intelligence says Russia hacks IP cameras to monitor NATO military logistics and weapons shipments to Ukraine. The Netherlands' AIVD…

Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!

2 months ago

7-Zip fixed a vulnerability that could let attackers run code by tricking users into opening malicious XZ-compressed archive files. 7-Zip…

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

2 months ago

F5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted…

AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign

2 months ago

Hugging Face says an autonomous AI agent breached part of its production infrastructure and accessed internal data and service credentials.…

Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

2 months ago

Unknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available. Volexity…

This website uses cookies.