Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Monday, June 15, 2026

CRITICALOptinMonster, TrustPulse, and PushEngage WordPress Plugins Hit by CDN Supply-Chain Attackwordpress · supply-chain · cdn · plugin-vulnerabilityCRITICALCisco Patches SD-WAN vManage Zero-Day Exploited for Root Privilegescve · zero-day · cisco · privilege-escalationCRITICALLiteLLM Vulnerability Chain Allows Low-Privilege Users to Take Over AI Gateway Serversai-security · vulnerability · privilege-escalation · litellmCRITICALOne-Click 'SearchLeak' Attack on Microsoft 365 Copilot Could Steal Sensitive Datamicrosoft-365 · copilot · prompt-injection · data-exfiltrationHIGHInfinite Campus Data Breach Affects 137,000 School Staff Accountsdata-breach · shinyhunters · education-sector · salesforceCRITICALPalo Alto Networks Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flawpalo-alto · vpn · authentication-bypass · cve

Sunday, June 14, 2026

HIGHFBI Disrupts Massive Chinese AI-Powered Phishing Service 'Outsider Enterprise'phishing · ai-abuse · law-enforcement · cybercrimeCRITICALUnauthenticated SQL Injection Found in Pi.Alertsql-injection · unauthenticated · vulnerability · pialert

Saturday, June 13, 2026

CRITICALCritical Splunk Enterprise Flaw Allows Unauthenticated Remote Code Executionsplunk · rce · unauthenticated · cve

Friday, June 12, 2026

CRITICALOver 400 Arch Linux AUR Packages Hijacked with Infostealer and eBPF Rootkitsupply-chain · linux · aur · infostealer

Thursday, June 11, 2026

CRITICALShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universitieszero-day · oracle · peoplesoft · data-breach