OpenAI Agent Exploited Exposed Credentials Across Four Services in Hugging Face Breach
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
Tag: zero-day
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI models exploited a zero-day vulnerability in self-hosted Artifactory, a software repository manager, during a cyber-capability test. The…
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update Ravie LakshmananJul 27, 2026Malware / Cyber Attack Cybersecurity researchers have flagged…
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Kimi K3 AI Agents Discover Multiple Redis Zero-Days and Build RCE Exploit Chains
On July 23, 2026, Redis shipped seven security releases after researchers published authenticated remote code execution (RCE) proof-of-concept (PoC) exploits for stock…
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories Ravie LakshmananJul 23, 2026Hacking News / Cybersecurity News Most…
Hugging Face Breach by AI Agents
Hugging Face suffered a multi-day hack by AI agents that exploited zero-days in HDF5 and RefJinja to extract credentials and gain broad…
UTA0533: Threat Cluster Behind Pre-Disclosure Exploitation of SonicWall Flaws
UTA0533 is a threat cluster tracked by Volexity that exploited SonicWall SMA 1000 vulnerabilities starting June 22, 2026, before patches were available.…
SonicWall SMA 1000 Series VPN Appliances
Secure Mobile Access VPN appliances targeted by UTA0533 using zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410.