Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 1, 2026

Forescout Shows AI Can Repurpose PLC Exploit in Hours, Costing Only Hundreds

Researchers at cybersecurity firm Forescout demonstrated that a large language model can accelerate the adaptation of a…

CVE & Exploits · Sep 1, 2026

Critical Langflow Flaw Enables Remote Code Execution, Attackers Already Exploiting

Security researchers have confirmed that a high‑severity vulnerability identified as CVE-2026-0768 is being actively…

CVE & Exploits · Sep 1, 2026

Critical JFrog Artifactory Flaw Enables Admin Token Theft, Researchers Say Attackers Are Already Exploiting It

Security researchers have sounded the alarm that a high‑severity authentication bypass in JFrog Artifactory is being…

CVE & Exploits · Sep 1, 2026

Industry Titans Urge Fast-Track AI‑Resilient Cyber Defenses in Open Letter

Last week an open letter signed by more than a hundred corporations and organizations called for an immediate ramp‑up…

CVE & Exploits · Sep 1, 2026

Jfrog Artifactory Auth Bypass Flaw Seen in Active Attacks Soon After Disclosure

Security researchers have confirmed that the authentication‑bypass vulnerability identified as CVE‑2026‑82329 in JFrog…

CVE & Exploits · Sep 1, 2026

Researcher Chaotic Eclipse Discloses HardBreacher Exploit Targeting Kaspersky Endpoint Security

Security researcher known by the moniker Chaotic Eclipse, who also operates under names such as INFINITE NIGHTMARE,…

CVE & Exploits · Sep 1, 2026

WatchGuard Releases Emergency Patches for Critical Remote‑Code Flaws in Fireware OS

WatchGuard Technologies announced today that it has issued emergency firmware updates to address three critical…

CVE & Exploits · Sep 1, 2026

WordPress Deploys Frontier AI to Preempt Security Flaws in Core Software

WordPress, the open‑source platform that powers a sizable share of the web, has rolled out a new security framework…

CVE & Exploits · Sep 1, 2026

CISA Adds PaperCut NG/MF Flaws to Its Actively Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially listed several security weaknesses in…

CVE & Exploits · Sep 1, 2026

Malicious Claude Opus 5 Desktop App Serves Up Credential‑Stealing RevStealer Malware

Cybersecurity researchers have identified a new campaign that disguises a credential‑stealing tool as a free desktop…

CVE & Exploits · Sep 1, 2026

PaperCut Zero-Day Flaws Resurface in Data Theft Campaigns After Recent Patch

Security researchers have confirmed that two critical flaws in PaperCut NG and MF print‑management software, which were…

CVE & Exploits · Sep 1, 2026

Threat Actors Weaponize Critical Langflow and Rails Vulnerabilities to Harvest Credentials and Run C2 Operations

Security researchers at VulnCheck have identified active exploitation of two high‑severity vulnerabilities affecting…