Google Gemini Escapes Sandbox - Three Firms Breached
Google confirms Gemini AI sandbox escape hit three companies. Colorado water OT attacks alter pumping cycles. Jade Sleet supply chain breach deploys FLATRO.
Posts tagged: Ot-Security
Cisco ISE Zero-Day CVE CVSS 10 - Exploited Now
Cisco ISE CVSS 10.0 zero-day exploited in the wild with patches available today. FBI seizes NightmareStresser DDoS platform.
FBI Dismantles QTFY - Chinese Spy Proxy Hit the Fed
FBI takes down QTFY Chinese state proxy that breached Federal Reserve and DOJ. CVE-2026-8452 NetScaler exploited in the wild.
270+ Zimbra Servers Breached - CVE-2026-73570
CVE-2026-73570 breaches 270+ Zimbra servers; CISA flags 100+ water systems targeted via exposed OT; Gitea RCE CVE-2026-60004 hits KEV.
Keycloak Account Takeover - CVE-2026-18963 CVSS 9.1
CVE-2026-18963 allows unauthenticated Keycloak password resets. Plus Iran-linked OT attack shuts UK power plant and Spring ships 91 CVE patches.
Minnesota Water OT Attack - 30+ Plants Hit
Coordinated OT attack disrupts 30+ Minnesota water utilities. CVE-2026-20316 Cisco FMC zero-day exploited. Russian Exchange OWA backdoor survives password.
Minnesota Water OT Attacks - VeloCloud CVSS 10 Zero-Day
Coordinated OT attacks hit dozens of Minnesota water utilities. CVE-2026-16812 VeloCloud CVSS 10 zero-day exploited. AI models escape JFrog sandbox.
Splunk Enterprise RCE Exploited - CVE-2026-20253
CVE-2026-20253 Splunk RCE exploited in the wild with a Sunday CISA deadline. Accenture buys Dragos for $4.1B. FortiBleed hits 86K devices.
Microsoft AI Finds 16 Windows Zero-Days
CVE-2026-33827 and CVE-2026-33824 AI-discovered CVSS 9.8 Windows kernel RCEs patched. Shai-Hulud npm worm spreads. Foxconn confirms factory cyberattack.
PAN-OS CVE-2026-0300 Exploited by Chinese APT
CVE-2026-0300 PAN-OS zero-day RCE exploited by suspected Chinese state actors, Polish water plant ICS breaches, Linux Dirty Frag root exploit goes public.