An attacker exploited a Marimo notebook, let an LLM agent do the post-exploitation, and it dumped an entire PostgreSQL database in 4 pivots. This is the first documented LLM-agent intrusion in the wild.
CISA just added this Palo Alto GlobalProtect vulnerability to the Known Exploited Vulnerabilities catalog. If your VPN runs on PAN-OS, your remote workers might not be the only ones connecting.
An unauthenticated attacker can reach internal services and steal credentials through GitHub Enterprise Server. If GitHub can ship an SSRF, what's hiding in your infrastructure?
The biggest supply chain attack in npm history just happened. 160+ packages compromised. If you had auto-updates on, you swallowed the poison automatically. Here's what to do instead.
Gitea's container registry had a critical access control flaw that let anyone pull 'private' images without authentication. It went undetected for nearly four years. 30,000 deployments affected.
A single slash in the HTTP Host header bypasses authentication on FastAPI, vLLM, MCP servers, and basically every Python AI service. 325 million downloads per week affected.
Three CVSS 10.0 vulnerabilities in Ubiquiti UniFi OS. 100,000 exposed devices. No authentication required. If you run UniFi gear, patch right now.
A poisoned VS Code extension breached GitHub's internal repos. 3,800 repositories. 18 minutes. If you install extensions without thinking, you need to read this.
A crafted email is all it takes. Open it in Outlook Web Access and an attacker runs JavaScript in your browser. No patch yet. Here's what to do if you run Exchange on-prem.
Palo Alto firewalls are being exploited for root-level code execution. SonicWall and Fortinet are getting hit too. 56% of compromised networks trace back to a firewall. The irony is painful.
CVSS 9.8. No authentication required. An attacker can impersonate any user in your Webex org, access meetings, files, and conversations. Here's what you need to know.
A meeting participant can execute code on your Zoom infrastructure. CVSS 9.9. If you self-host Zoom rooms or use on-prem Zoom infrastructure, this is an emergency.