Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Thursday, September 17, 2026

CRITICALCritical Docker Sandboxes Flaw Allows macOS Host File Accessdocker · macos · sandbox-escape · privilege-escalationCRITICALCritical Unbound DNSSEC Validator Flaw Allows RCE via Malicious DNS Zoneunbound · dnssec · rce · heap-overflowHIGHBIND 9 Update Fixes 14 Flaws, Including Unauthenticated DoH Crashbind9 · dns · dos · vulnerabilityHIGHGyazo Breach Exposes 23.6 Million User Records and 490 Million Image Metadata Recordsdata-breach · gyazo · user-data · vulnerability

Wednesday, September 16, 2026

CRITICALAttackers Exploit Issabel Framework Flaw for Unauthenticated OS Command Executionissabel · rce · unauthenticated · exploitationHIGHGoogle Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitationgoogle-pixel · privilege-escalation · exploitation · mobile-securityHIGHAcronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacksacronis · cpanel · privilege-escalation · exploitationHIGHAttackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shellswordpress · woocommerce · rce · web-shellCRITICALActive Exploitation Targets WSO2 API Manager JWT Bypass with Forged Admin Tokenswso2 · api-manager · jwt-bypass · account-takeover

Tuesday, September 15, 2026

HIGHBrevo Supply Chain Attack Hits 100k+ Sites with WordPress Backdoors and Clickfix Malwaresupply-chain · wordpress · malware · brevo

Sunday, September 13, 2026

HIGHPasskey Phishing Attacks Hijack Microsoft Cloud Accounts and Exfiltrate Dataphishing · microsoft · cloud-security · data-breach

Saturday, September 12, 2026

CRITICALCISA Adds Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV Catalogcisa · kev · vulnerabilities · exploitationHIGHOpenAI Agents Linked to RubyGems RCE Campaignai · rce · supply-chain · threat-actor

Friday, September 11, 2026

CRITICALGitLab Patches Critical Path Traversal Flaw Exploited In-The-Wildgitlab · path-traversal · rce · vulnerabilityHIGHAnthropic Warns of Claude AI Abuse by Cybercriminals and State-Sponsored Hackersai · threat-actor · malware · espionageHIGHNew Android Malware 'Mantax Otax' Combines Ransomware and Spywareandroid · malware · ransomware · spywareHIGHNew Android Malware Encrypts Files, Steals Data, and Harasses Victimsandroid · malware · ransomware · spyware

Thursday, September 10, 2026

HIGHAI-Powered Attack Exploited PaperCut Flaws to Hack 395 Organizationsai · exploitation · papercut · threat-actorCRITICALCheck Point VPN Flaws Allow Unauthenticated Remote Code Executionvpn · rce · check-point · vulnerability

Wednesday, September 9, 2026

HIGHUS Accuses China-Based AI Firms of 'Industrial-Scale' Model Distillationai · espionage · model-theft · chinaCRITICALMicrosoft Patches Record 974 Vulnerabilities, Including Two Zero-Dayspatch-tuesday · zero-day · microsoft · vulnerabilities

Sunday, September 6, 2026

CRITICALMikroTik Routers Hijacked via Internet-Exposed SSH Without Authenticationmikrotik · ssh · router-exploit · unauthenticated

Saturday, September 5, 2026

CRITICALUnpatched Magento and Adobe Commerce Zero-Day Actively Exploitedzero-day · rce · e-commerce · magentoHIGHJetBrains Cadence Breached via Unpatched TeamCity Vulnerabilitybreach · teamcity · aws · credentialsHIGHCritical VMware Workstation and Fusion Flaw Allows VM Admins to Execute Host Codevmware · virtualization · rce · privilege-escalation