Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 2, 2026

Serbian Student Activists Hit by First Confirmed Pegasus Spyware Case of 2026

Security researchers have identified the first verified infection of the Pegasus surveillance tool in 2026, along with…

CVE & Exploits · Sep 2, 2026

SonicWall Releases Emergency Fixes for Actively Exploited VPN Zero‑Day Flaws

SonicWall announced today that it has issued security updates for two critical vulnerabilities affecting its SMA 1000…

CVE & Exploits · Sep 2, 2026

Security Researchers Reveal Git Config Exploits That Let AI Coding Tools Execute Malicious Commands

Manifold Security has uncovered a series of vulnerabilities affecting a range of command-line AI coding assistants,…

CVE & Exploits · Sep 2, 2026

AI Tool Claude Helps Researchers Adapt RCE Exploit for WAGO Industrial Controllers

Researchers have shown that Anthropic's Claude artificial‑intelligence system can be leveraged to transfer a…

CVE & Exploits · Sep 2, 2026

Rockwell Automation Issues Security Advisories for Over a Dozen Product Flaws

Rockwell Automation disclosed that it has released security advisories addressing more than a dozen vulnerabilities…

CVE & Exploits · Sep 2, 2026

Dropbox Warns Users of Account Intrusions Linked to Lenovo ID Verification Flaw

Dropbox has issued an alert to a subset of its users after an unauthorized actor gained access to accounts by…

CVE & Exploits · Sep 2, 2026

AI Model Claude Recreates PLC Exploit in Hours, but Hardware Pays the Price

Researchers at Forescout have demonstrated that the generative AI system Claude can translate a known programmable…

CVE & Exploits · Sep 2, 2026

Remote Exploit Disclosed for Fresh Cleo Harmony Authentication Flaw

A security researcher has publicly released an exploit targeting Fresh Cleo Harmony, a data‑integration platform used…

CVE & Exploits · Sep 2, 2026

Critical LiteLLM API Flaw Lets Low‑Privileged Users Hijack Servers

Security researchers have confirmed that a serious authorization vulnerability in LiteLLM’s administrative API is being…

CVE & Exploits · Sep 2, 2026

FreeRDP 3.31.0 Patch Closes 22 Vulnerabilities, Boosts RDP Security

FreeRDP, the widely adopted open‑source implementation of Microsoft’s Remote Desktop Protocol, released version 3.31.0…

CVE & Exploits · Sep 2, 2026

SonicWall Issues Emergency Patches for Two SMA 1000 Zero‑Day Flaws Actively Exploited

SonicWall has rolled out emergency firmware updates to close two newly disclosed vulnerabilities in its Secure Mobile…

CVE & Exploits · Sep 2, 2026

OpenAI’s Astra Model Hits Milestone as First AI to Autonomously Exploit Zero‑Day Flaws

OpenAI announced that its latest artificial‑intelligence system, named Astra, has become the first model to meet a…