Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Saturday, September 26, 2026

HIGHCompromised GitHub Actions Re-enabled with Malicious Payload Still Activegithub-actions · supply-chain · malware · open-sourceMEDIUMOpenAI's AI Agents Accidentally Uploaded User Images to Third-Party Sitesai-security · privacy · data-leakage · openaiHIGHElementor WordPress Plugin CSRF Flaw Allows Admin Account Creationwordpress · elementor · csrf · admin-takeoverCRITICALCISA Warns of Actively Exploited SharePoint and MikroTik RouterOS Flawscisa · sharepoint · mikrotik · exploitationCRITICALKiteworks Urges Customers to Shut Down Systems Over Imminent Cyber Attack Warningkiteworks · zero-day · breach-warning · incident-response

Friday, September 25, 2026

HIGHRoundcube Pre-Auth SQL Injection Flaw Actively Exploitedroundcube · sql-injection · webmail · exploitationHIGHCloudflare Fixes Cross-Tenant Data Exposure in Containerscloudflare · cloud-security · data-exposure · vulnerability

Thursday, September 24, 2026

HIGHUnpatched OnePlus Flaws Allow Installed Android Apps to Gain Root Without Permissionsoneplus · android · root-access · privilege-escalationHIGHAI Coding Agents Double the Rate of Secrets Sprawl in Codeai-security · secrets-management · developer-security · supply-chainCRITICALAttackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosurewordpress · rce · zero-day · exploitation

Wednesday, September 23, 2026

HIGHAttackers Use Malicious Terraform Providers to Deliver Go Malwareterraform · supply-chain · malware · goCRITICALNew cPanel Flaw Allows Hosting Account to Gain Root Privilegescpanel · privilege-escalation · rce · hostingCRITICALExploit Released for Unpatched Ubuntu Linux Container Escape Flawlinux · container-escape · ubuntu · exploitCRITICALF5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCEzero-day · rce · f5 · exploitationCRITICALChinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malwarezero-day · chrome · windows · malwareHIGHCritical Next.js ImageResponse Flaw Allows Server Code Execution via Crafted SVGnextjs · rce · web-vulnerability · svg

Saturday, September 19, 2026

HIGHNorth Korean WaterPlum Hackers Infected 30,000 Devices Worldwide, Stole $10.7M in Cryptonorth-korea · apt · cryptocurrency · malwareHIGHSolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCEsolarwinds · rce · unauthenticated · hard-coded-keyCRITICALCritical Pre-Auth RCE in Orkes Conductor Exploited in the Wildrce · exploitation · orchestration · critical-vulnerability

Friday, September 18, 2026

CRITICALCisco Zero-Day in ISE Allows Unauthenticated RCE (CVSS 10.0)cisco · zero-day · rce · authentication-bypassHIGHPublic Exploits Released for Four Linux Kernel Flaws Enabling Local Rootlinux-kernel · privilege-escalation · exploit · local-rootHIGHTransparent Tribe Deploys New Rust Backdoor Using Private GitHub Repos for C2apt · transparent-tribe · rust · githubCRITICALMicrosoft Patches CVSS 10.0 Azure AI Foundry Privilege Escalation Flawmicrosoft · azure · privilege-escalation · aiHIGHWeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storagenpm · malware · infostealer · supply-chain

Thursday, September 17, 2026

CRITICALCritical Check Point Management Flaw Allows Unauthenticated Root Code Executioncheck-point · rce · root-privileges · unauthenticated