AI Bug-Finding Hype Meets Reality: Less Than 0.5% of Anthropic-Linked CVEs Exploited in the Wild
Data tracking vulnerabilities found through Anthropic's Project Glasswing suggests AI-discovered bugs are not translating into…
Month: September 2026
Flock Safety Camera Reverse-Engineered, Revealing Broad Surveillance Capabilities and a Basic Encryption Flaw
A physical teardown of a Flock ALPR camera found that the device detects far more…
ShinyHunters Hijacks Clop’s Leak Site and Demands Eight-Figure Payment
A rival cybercrime crew has seized Clop's dark web infrastructure and turned extortion tactics back…
BragJack Proof-of-Concept Shows One Malicious Extension Can Hijack AI Browser Agents Across Multiple Platforms
A researcher from Forever Security has demonstrated how a single rogue browser extension can subvert…
CISA Adds Actively Exploited Linux Kernel Vulnerability to Known Exploited Catalog
CVE-2025-39682, a Linux kernel flaw involving improper handling of exceptional conditions, is now confirmed as…
Plugin4Shell: SHA-Pinning Bypass Exposes Major AI Coding Agents to Zero-Click RCE
A supply-chain flaw in how AI coding agents enforce plugin integrity checks allows attackers to…
Cisco Identity Services Engine Zero-Day Allows Full Device Takeover, Actively Exploited
A maximum-severity authentication bypass in Cisco ISE gives attackers root access and control over network…
AI in Political Campaigning: Broad Listening Tools Offer a Different Model
While most campaigns use AI to broadcast messages at voters, a small number of civic…
Cisco ISE Authentication Bypass Scores Perfect 10 Under Active Exploitation
A maximum-severity flaw in Cisco Identity Services Engine is being actively exploited, giving unauthenticated remote…
ConnectWise ScreenConnect Vulnerability Under Active Exploitation, CISA Confirms
A critical-severity flaw in ConnectWise ScreenConnect is being actively exploited in the wild, with CISA…