Python

Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

North Korean Hackers Target Open Source Software Supply Chain via npm Packages

Critical CVE-2026-11332 Affects Fedora Ansible-Core Versions

New NarwhalRAT Malware Targets Korean Users via Phishing Emails

Russian UAT-11795 Targets Users with Trojans in Legitimate Software

Multiple Critical CVEs Exploited in Cybersecurity Attacks

ComfyUI Servers Compromised for Cryptomining and Botnet Operations

LiteLLM Supply Chain Attack Exposes Critical Credentials

Critical Security Updates for Python 3.13 in Fedora Address Multiple Vulnerabilities

Multiple CVEs in Python 3.15 Affect Fedora Users

Human Attacker Exploits Marimo RCE at Machine Speed

ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack

Kimi K3 AI Discovers Multiple Zero-Day Vulnerabilities in Redis Database

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

Critical Django Vulnerabilities Affecting Multiple Ubuntu Releases

Multi-Stage Malware Campaign Utilizing Obfuscated VBS and PNG Loaders

Exploitation of Apache Tomcat CVE-2025-24813 Confirmed

Critical RCE Vulnerability Discovered in LLaMA-Factory WebUI

Multiple CVEs Expose Vulnerabilities in Cybersecurity Tools and Applications

Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats

Malicious Background Removal Tool Distributes RATs and Infostealers

North Korean ClickFake Campaign Targets Web3 Professionals with RATs

Cisco Talos Launches CAIRN to Combat AI-Integrated Malware

Critical Python Vulnerabilities Affecting Ubuntu Systems

Critical RCE Vulnerability in Hugging Face Transformers Library Disclosed

Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

Critical Vulnerabilities Discovered in PickleScan Security Scanner

Operation Navy Ghost Targets Telegram Bot Developers with Malicious PyPI Packages

Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)

Critical CVE-2026-62911 Exposes 22,000 Exchange Servers to Remote Code Execution

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

Critical Netlogon Vulnerability CVE-2026-41089 Exploited

Critical Vulnerabilities in Apache Fory Affecting Multiple Versions

Critical RCE Vulnerabilities Disclosed in NLTK Toolkit

New Pink Extortion Group Targets Microsoft 365 via Voice Phishing

Exploits Targeting Qualcomm Firmware and Linux Kernel Vulnerabilities

Chronus Group Breach Exposes 36 Million Mexican Citizens' Data

Payouts King Ransomware Uses Edgecution Malware via Malicious Edge Extension

AI Supply Chain Attacks and Model Poisoning Threats

Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google

Massive Redis Cryptomining Botnet Compromises 3,562 Servers

Exploit for Use After Free in Linux Linux_Kernel

haxunit exploit

BruteXSS exploit

Analysis Of Storm 0558 Techniques For Unauthorized Email Access

Redis Cryptomining Botnet 3562 Servers

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

ApacheTomcatScanner exploit

MSFinger exploit

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

CVE-2019

CVE-2018

CVE-2026-85694 CVE Vulnerability Disclosures / 15h LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute arbitrary code on the operator's host without review.

CVE-2026-85694 - Exploits & Severity

How Security Leaders Are Shaping the Future of AI

Investigating Incidents Cybersecurity Evals

SonicWall Patches Two New Actively Exploited Zero

Microsoft identifies 'TerminalFix' campaign spreading Python reverse tunnel

21000 Exchange Servers Exposed to Public PoC Exploit After Pwn2Own $200K Chain Demo

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Suspected Chinese actor targets Philippine nuclear and naval entities using known vulnerabilities

Chinese Speaking Operator Philippine Nuclear Naval Contractor

Chinese operator exploits a 3-year

Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

Breaking Claude Code Opus 5 And Automode

2026 04 02 Incident Report Litellm Telnyx Supply Chain Attack

NLTK Mass Disclosure — 4 CVEs, Peak 9.8 (Allowlisted Pickle RCE) ThreatAft — Cybersecurity Intelligence / 12h A mass disclosure of four CVEs across versions before 3.10.3 just dropped, with CVE-2026-79657 leading at CVSS 9.8 — an unsafe pickle deserialization vulnerability where allowlisted pickle loaders trust entire module namespaces, allowing arbitrary code execution via crafted model files. CVSS 9.8 — Critical pickle deserialization RCE — CVE-2026-79657 allows attackers to execute arbitrary

Digital Forensics and Incident Response, Senior Consultant DFIR

New Agent Tesla malware version uses emoji obfuscation to evade detection

New SynkLoader malware pushed in Microsoft Teams phishing campaign

Cryptographic Context Injection Grok Data Theft

Grok chat duped into swallowing injected instructions

Benchmarking Secure-and

826708

Top 5 Cyber Threat Intelligence Services Benchmarked

Fedora 44 python-wsgidav Critical Issues CVE-2026-55509 CVE-2026

Narwhalrat

recordedfuture.com

AI Agent Framework Flaws Enabled Unauthorized Tool Use and Remote Code Execution

Sapphire Sleet