Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds Ravie LakshmananSep 15, 2026Vulnerability / Malware With artificial intelligence (AI) shrinking…
Tag: CVE-2026-39987
Marimo Notebook High-Severity Flaw Allows MCP Command Execution Before Cell Execution
Marimo, the developer of the open-source Marimo notebook software, has patched a high-severity code injection vulnerability tracked as CVE-2026-75149. The flaw, discovered…
CISA Adds Langflow, Apache Tomcat, and N-able N-central Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation.…
Chinese Hacker Uses DeepSeek via Telegram to Drive Autonomous Attacks
Palo Alto Networks' Unit 42 has uncovered a Chinese-speaking threat actor who leveraged the DeepSeek AI model through the open-source Hermes Agent…
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories Ravie LakshmananJul 30, 2026Hacking News / Cybersecurity News…
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…
CVE-2026-39987 — Vulnerability brief
CVE-2026-39987 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…