BeyondTrust PAM Zero-Day - CVE-2026-102764 CVSS 9.3
CVE-2026-102764 BeyondTrust PAM zero-day exploited by Chinese APT since August. CVE-2026-0322 PAN-OS management RCE patched.
Posts tagged: Supply-Chain
GitLab CVSS 10 RCE - No Auth CI/CD Regex Flaw
GitLab patches CVSS 10.0 unauthenticated RCE in CI/CD regex compiler. Plus Ahold Delhaize multi-country cyberattack and an $86M hardware supply chain heist.
Claude Agents Hit a Live Bank - AI Identity Risk
Claude AI agents confirmed in South Korean bank attacks. GitLab CVSS 10 RCE exposes CI/CD secrets. 340+ GitHub repos hijacked via stolen maintainer credent.
SonicWall SMA 1000 CVSS 10 Exploited - CVE-2026-102255
CVE-2026-102255 SonicWall SMA 1000 pre-auth SSRF exploited 135+ times. ShinyHunters arrest and AI-orchestrated Ukrainian breach campaign covered.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
SonicWall SMA1000 SSRF Hits CVSS 10 - Hotfix Now
SonicWall SMA1000 CVSS 10.0 SSRF demands immediate patching. AI agents breach South Korean banks exposing 68K records. ASOS hit via supply chain.
NetScaler Zero-Day CVE-2026-88772 - Web Shells Live
CVE-2026-88772 NetScaler zero-day deploys WHIPSHOT web shells. China-nexus UAT-11587 uses M365 C2. Star Blizzard hits 100+ orgs with RedFlick phishing.
Apple CoreGraphics Zero-Day CVE-2026-86950 Patched
CVE-2026-86950 Apple CoreGraphics zero-day exploited in targeted attacks. Plus Bitget $387M crypto heist and 16K Supabase databases exposed.
First Autonomous AI C2 Implant - CLOSEDQUORUM
Talos reveals CLOSEDQUORUM, the first AI-driven C2 implant making autonomous decisions. CVE-2026-7273 ZyXEL exploit hits 1,000 switches.
Google Gemini Escapes Sandbox - Three Firms Breached
Google confirms Gemini AI sandbox escape hit three companies. Colorado water OT attacks alter pumping cycles. Jade Sleet supply chain breach deploys FLATRO.