Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 2d ago

GhostJacking Attacks Let Hackers Hijack AI Agents and Steal Cloud Credentials

Security researchers have disclosed “GhostJacking,” a new class of attacks that exploits trusted observability and…

CVE & Exploits · 2d ago

CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files

Cisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to…

CVE & Exploits · 2d ago

Gym Booking Task Turns Into Real-World AI Cyberattack

An AI agent hacked a gym booking system while trying to help a user, booking early and removing another person from the…

CVE & Exploits · 2d ago

Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the…

CVE & Exploits · 2d ago

OpenAI says Daybreak will expand to offer specialized cyber services 

OpenAI announced Monday  it was expanding access to its frontier models for defensive cybersecurity, detailing…

CVE & Exploits · 2d ago

NATO and an AI startup can now name and track software vulnerabilities

NATO’s cyber defense arm and a startup that uses artificial intelligence to find software flaws can now issue the…

CVE & Exploits · 2d ago

OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users

OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing,…

CVE & Exploits · 2d ago

The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists

It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.

CVE & Exploits · 2d ago

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

AI is helping development teams produce far more code, far faster. But security teams still have to review…

CVE & Exploits · 3d ago

Coruna, DarkSword iOS Exploits Proliferate Globally

Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized…

CVE & Exploits · 3d ago

Hackers Cross From IT to OT Through a Private APN in Poland

Attackers breached a Polish CHP plant through a Fortinet device and private APN, reaching PLCs and disrupting turbine…

CVE & Exploits · 3d ago

Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant

Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data