T1059.006 - Python

Critical CVE-2026-0768 Exploited in Langflow Attacks

ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack

LiteLLM Supply Chain Attack Exposes Critical Credentials

Human Attacker Exploits Marimo RCE at Machine Speed

ComfyUI Servers Compromised for Cryptomining and Botnet Operations

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

Langflow CVE-2026-33017 Exploited for AWS Key Theft and Botnet Deployment

Critical Langflow RCE Vulnerability Exploited Within 20 Hours

Critical RCE Vulnerability in Microsoft GitHub Repository Disclosed

Critical RCE Vulnerability Discovered in LLaMA-Factory WebUI

Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats

North Korean ClickFake Campaign Targets Web3 Professionals with RATs

Malicious AI Skills Campaign Targets 1.7 Million Users, Exposes Major Vulnerabilities

C0XMO Gafgyt Variant Exploits DD-WRT Routers via CVE-2021-27137

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

Operation Navy Ghost Targets Telegram Bot Developers with Malicious PyPI Packages

LiteLLM 1.107.0 Compromised: Credential Stealer and RAT Distributed via PyPI

Payouts King Ransomware Uses Edgecution Malware via Malicious Edge Extension

Storm-2949 Cyberattack Targets Microsoft 365 and Azure Data

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

Credential Sniffing Malware Disguised as Windows 11 Update Targets Users

Unsloth Studio Vulnerability Allows Code Execution via Model Inspection

JDownloader Website Compromised to Distribute Malware to Users

ClearFake Campaign Uses Smart Contracts for C&C on BSC Testnet

AI-Driven Malware Framework Automates EDR Evasion Tactics

Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models

TeamPCP Targets CI/CD Pipelines to Steal Developer Credentials

ClickFix and PySoxy Proxying Threatens Cybersecurity with Enhanced Persistence

SloppyRAT: New Remote Access Trojan Fuels Ransomware Operations

Snyk Launches Evo Continuous Offensive Security for AI-Powered Pentesting

Japanese Teen Arrested for Canceling 46,812 Accounts via AI Exploit

Aeternum Botnet Leverages Polygon Smart Contracts for Resilience

Boeing RFQ Malware Campaign Exploits DOCX, RTF, JS, and Python

AsyncRAT Malware Campaign Exploits Trusted Services for Stealthy Attacks

Sandbox Escapes Discovered in Major AI Coding Tools

Multi-Stage PureLog Stealer Campaign Targets Key Industries via Copyright Lures

CVE-2026-63720: Code Injection Vulnerability in datamodel-code-generator

VIPERTUNNEL Python Backdoor Exploits Fake DLL for Stealth Access

Ransomware Fuels Surge in Global Cyberattacks

AI-Driven Cyber Campaign Targets Government Linux Servers

New GitHub Exploit Allows AI Coding Agents to Execute Malicious Payloads

Joint alert details Chinese cyber activity linked to Integrity Technology Group

github.com /advisories/GHSA-4gfv-wg42-7jw5

github.com /MervinPraison/PraisonAI/security/advisories/GHSA-4gfv-wg42-7jw5

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

github.com /langflow-ai/langflow/issues/13336

gist.github.com /Ro1ME/c11b1e63e4e8fca6b25275144f25ec2a

Look Dont Load Model Inspection In Unsloth Studio Leads To Critical Arbitrary Code Execution

Unsloth's model picker had a code-execution problem

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers

Analysis Of Storm 0558 Techniques For Unauthorized Email Access

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

SloppyRAT Malware Uses Advanced Evasion to Aid Ransomware Attacks

Exposed Server Reveals Automated Extortion Pipeline | Information & Data Manager

Machine speed, hold the AI: Hand-rolled marimo CVE-2026

SloppyRAT: A New Tool For Ransomware Attacks | ThreatLabz - Zscaler, Inc.

PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector

full-60-ddos

CVE-2026-85694 CVE Vulnerability Disclosures / 15h LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute arbitrary code on the operator's host without review.

CVE-2026-85694 - Exploits & Severity

Postgreshell The Database Powering Much Of The Internet Had An Open Door For 12 Years

Active Exploitation Alert: SonicWall SMA 1000 Zero-Day Vulnerabilities (CVE-2024

21000 Exchange Servers Exposed to Public PoC Exploit After Pwn2Own $200K Chain Demo

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Suspected Chinese actor targets Philippine nuclear and naval entities using known vulnerabilities

Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

Breaking Claude Code Opus 5 And Automode

Unauthenticated Remote Code Execution in NASA AMMOS AIT-GUI 2.5.0 via /tlm/query file ...

Zenity Labs Uncovers 1.7 Million-Install Malicious Skills Campaign and Dozens of ...

Inside The Influence And Fraud Patriot Bait Campaign

Critical RCE in IBM Langflow Triggers CISA Emergency Deadline

Agentic AppSec: Remediation and Malicious Code Defense

Agent Intrusion Technical Timeline