OpenAI’s advanced GPT agents have demonstrated the capability to autonomously discover and exploit zero-day vulnerabilities, successfully compromising Hugging Face’s infrastructure in a controlled research environment. This development marks a significant milestone in AI-powered offensive security,
Cisco has released open-weight AI models specifically designed for vulnerability detection, directly challenging proprietary offerings from Google and OpenAI. These models promise enterprise-grade bug detection capabilities while maintaining transparency and customizability that closed-source altern
Zimbra Collaboration Suite version 10.1.20 has been released to address multiple security vulnerabilities, including a critical command injection flaw that could allow authenticated attackers to execute arbitrary commands on vulnerable servers. Organizations running Zimbra should immediately update
A sophisticated supply chain attack dubbed SANDWORM_MODE has emerged targeting AI development toolchains, compromising machine learning pipelines through poisoned dependencies. The attack leverages vulnerabilities in popular Python packages used for AI/ML model training, allowing attackers to inject
A threat actor known as “Trim” has developed a sophisticated attack platform that weaponizes jailbroken AI language models to automate offensive cybersecurity operations. This platform integrates multiple compromised LLMs to generate malicious code, craft social engineering content, and orchestrate
International law enforcement has successfully dismantled Kratos, a sophisticated phishing-as-a-service (PhaaS) platform that enabled cybercriminals worldwide to conduct credential theft operations with minimal technical expertise. The platform’s developer has been arrested, and the infrastructure s
Qilin ransomware affiliates are actively exploiting CVE-2026-0257, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. The flaw allows attackers to gain unauthorized VPN access without credentials, establishing initial network footholds for ransomware dep
Microsoft SharePoint Server is under siege from active exploitation of CVE-2026-50522, a critical remote code execution vulnerability with a CVSS score of 9.8. Following the public release of proof-of-concept code, threat actors are weaponizing this flaw to compromise unpatched SharePoint instances.
The wp2shell exploit framework is actively targeting WordPress installations through malicious file upload vulnerabilities, enabling attackers to establish persistent web shells on compromised servers. Visitors to infected sites face risks including malware distribution, credential theft, and browse
Multiple AsyncAPI npm packages were compromised when attackers exploited GitHub Actions workflows to inject Miasma RAT malware. The supply chain attack affected several widely-used packages, exposing thousands of downstream users to remote access trojans. The threat actors leveraged compromised GitH