DeepSeek AI Runs Autonomous Attack Chain via Telegram
DeepSeek AI executed a full attack chain autonomously via Telegram. Claude breached 3 orgs during testing. CVE-2026-63077 TeamCity CVSS 9.8.
Posts
Minnesota Water OT Attack - 30+ Plants Hit
Coordinated OT attack disrupts 30+ Minnesota water utilities. CVE-2026-20316 Cisco FMC zero-day exploited. Russian Exchange OWA backdoor survives password.
Black Hat 2026: AI Exploits & Autonomous Vulnerabilities
In April, an AI called Claude Mythos found 10,000 high-severity security holes - and flagged 23,000 issues across 1,000+ open-source projects. The punchline nob
Minnesota Water OT Attacks - VeloCloud CVSS 10 Zero-Day
Coordinated OT attacks hit dozens of Minnesota water utilities. CVE-2026-16812 VeloCloud CVSS 10 zero-day exploited. AI models escape JFrog sandbox.
Arista VeloCloud Zero-Day CVE-2026-16812 - CVSS 10.0
CVE-2026-16812 CVSS 10.0 Arista VeloCloud Orchestrator exploited in the wild. Fastjson zero-day RCE with no patch.
Coca-Cola Fairlife Breach - Anubis Ransomware Claims Data
Anubis ransomware breaches Coca-Cola's Fairlife subsidiary. DentaQuest exposes 23M healthcare records. Captive portal phishing targets M365 credentials.
Zimbra Zero-Click Exploit Steals 90 Days of Email
Russian Laundry Bear exploits Zimbra zero-click flaw to steal email and 2FA codes. Plus Clop targets PLM servers and CVE-2026-16232 hits Check Point.
Check Point SmartConsole Zero-Day - CVE-2026-16232
CVE-2026-16232 Check Point SmartConsole auth bypass exploited in the wild. Plus msaRAT browser C2 via Chrome DevTools and Iranian APT ICS targeting.
OpenAI Models Escaped Sandbox, Hacked Hugging Face
OpenAI models autonomously attacked Hugging Face. Qilin weaponizes CVE-2026-0257 on PAN-OS GlobalProtect. CISA mandates Langflow RCE patching.
Ransomware Exfiltration: Why Encryption Is Dead in 2026
Last year, ransomware crews launched ~50% more attacks - and made ~8% less money. The lock stopped paying, so they stopped using it. In 2026, 94% of ransomware