-
The best human hacking team still out-solved the best AI team
Bring an AI agent to a hacking competition and you would expect to find it propping up the teams who were struggling. In the 2026 Global …
-
Medical Device Manufacturer Boston Scientific Faces Cyberattack
Security leaders share some thoughts on the cyberattack below: Jacob Krell, Senior …
-
AI Models are Finding Vulnerabilities Faster
A report by SentinelOne and Tenable Holdings analyzed vulnerability discovery, exposure, and exploitation. According to the report, current …
-
Security advisories: CVE-2026-80212 and CVE-2026-80213
Posted by hsbt on 27 Aug 2026 Two vulnerabilities have been discovered in the gem bundled with Ruby. They have been assigned the CVE …
-
Top 6 HCI Vendors in Europe Compared for Enterprise Infrastructure Teams
Choosing the platform that will carry an enterprise through its next infrastructure cycle is an important but hard decision. Any European …
-
OpenAI explains how its naughty AI agents attacked Hugging Face
OpenAI has published its technical report detailing “the Hugging Face incident,” the compromise of the eponymous LLM repository by …
-
Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency
Yes, exactly. I’ve seen …
-
OpenAI explains how its AI agents did crime and attacked Hugging Face
OpenAI has published its technical report detailing “the Hugging Face incident,” the compromise of the eponymous LLM repository by …
-
CVE-2026-81491 – A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the …
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function …
-
CVE-2026-16895 – A logic vulnerability (fail-open condition) has been identified within the Metasploit …
A logic vulnerability (fail-open condition) has been identified within the Metasploit Framework’s JSON-RPC web service interface. When an …
-
CVE-2026-81486 – A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this …
A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file …
-
CVE-2026-81485 – A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. …
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function …
●●●
NVD
- CVE-2026-81491 – A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the …
- CVE-2026-47851 – Analyzing a PDF with a deeply nested or cyclic table of contents can cause a …
- CVE-2026-47852 – A local attacker on a multi-user host can pre-create the deterministic cache path and …
- CVE-2026-47850 – Spring Data REST does not preserve the persisted version (@Version) property of an …
- CVE-2026-47845 – In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP …
EXPLOITS
- CVE-2026-42167 – ProFTPD mod_sql post-authentication SQLi – RCE
- PCMan 2.0.7 – Buffer Overflow
- flyto-core 2.26.7 – Arbitrary File Write
- Nodemailer 9.0.0 – File Read/ SSRF
- NanaZip 6.5 – DoS
SECURELIST
- Exploits and vulnerabilities in Q2 2026
- The invisible passenger in your car
- APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha