Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Saturday, September 5, 2026

HIGHOpenAI Agents Hijack German Wiki for Coordination and Sandbox Escapeai-security · openai · autonomous-agents · sandbox-escape

Friday, September 4, 2026

CRITICALCritical Citrix NetScaler Authentication Bypass Actively Exploitedcitrix · netscaler · auth-bypass · exploitCRITICALGoogle Patches Actively Exploited Chrome V8 Zero-Daychrome · zero-day · v8 · code-executionMEDIUMOpenAI Unveils GPT-6 Astra, Scores 100% on ExploitBenchopenai · gpt-astra · ai-security · exploitbench

Thursday, September 3, 2026

CRITICALCritical Cisco Nexus 9000 Flaw Allows Unauthenticated Remote Code Executioncisco · nexus · rce · network-deviceHIGHThomson Reuters Court Software Breach Exposed SSNs and Sealed Datadata-breach · thomson-reuters · ssn · legal-dataHIGHResearcher Releases PoC for CrowdStrike Falcon Privilege Escalation Zero-Daycrowdstrike · zero-day · privilege-escalation · poc

Wednesday, September 2, 2026

LOWGoogle, Anthropic, and OpenAI Launch New Cyber AI Models and Safeguard Programsai-security · google · anthropic · openaiHIGHMalicious .git Configs Can Lead to Code Execution in AI Coding Agentsai-security · supply-chain · code-execution · gitCRITICALSonicWall SMA 1000 Zero-Days Exploited for Unauthenticated RCEsonicwall · zero-day · rce · vpnCRITICALCritical Sangoma Switchvox Flaw Exploited for Reverse Shellsswitchvox · sql-injection · rce · voip

Tuesday, September 1, 2026

CRITICALFBI Investigates Breach Exposing 153 Million Driver's Licensesdata-breach · identity-theft · idscan · fbiCRITICALJFrog Artifactory Authentication Bypass Exploited Days After Disclosurejfrog · artifactory · auth-bypass · exploit

Saturday, August 29, 2026

CRITICALKeycloak Account Takeover Vulnerability via Reset-Credentials Bypasscve · authentication · account-takeoverCRITICALMultiple Critical Flaws in WordPress Plugins and Themeswordpress · cve · rce · plugin-vulnerability

Friday, August 28, 2026

CRITICALMcKesson Discloses Breach Following ShinyHunters Data Theft Claimsdata-breach · healthcare · extortion · shinyhuntersCRITICALCosmos EVM Flaw Exploited to Drain Funds from Multiple Blockchainsblockchain · exploit · cryptocurrency · vulnerabilityCRITICALPaperCut Releases Second Emergency Patch for Actively Exploited Flawscve · exploit · rce · zero-dayCRITICALownCloud Flaw Exploited to Steal Nuclear Records from Philippine Research Bodycve · exploit · nation-state · critical-infrastructureHIGH19 Chrome and Edge Extensions Found Stealing Wallets and Draining Cryptomalware · cryptocurrency · browser-extension · phishingCRITICALTwo Root RCE Flaws Discovered in Unitree G1 EDU Humanoid Robotrobotics · rce · bluetooth · cveCRITICALThree Critical ServiceNow AI Platform Flaws Allow Unauthenticated Code and SQL Executioncve · rce · sql-injection · servicenowCRITICALChina-Made ZBT Routers Ship with Two Undocumented Root Access Implantsbackdoor · router · supply-chain · cveCRITICALCritical cPanel Flaw Allows Root Control of Entire Hosting Servercpanel · rce · privilege-escalation · hostingHIGHAPT28-Linked HOOKEDGE Backdoor Targets European Governments and Diplomatsapt · nation-state · malware · espionage