Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
SecurityWeek reported that the x47.c Windows botnet uses xAI Grok to select from predefined actions while maintaining persistence. The report is a reminder that AI services can appear inside ordinary…
CISA added vulnerabilities affecting WSO2 and Adobe Commerce/Magento to its Known Exploited Vulnerabilities catalog after evidence of exploitation, according to reporting published September 26. The additions put two widely used…
Microsoft SharePoint vulnerability CVE-2026-65660 is now being exploited in attacks, according to reporting that cites its addition to CISA’s Known Exploited Vulnerabilities catalog. CISA’s KEV inclusion is a strong signal…
Security researchers warned on September 26 that two unpatched Citrix NetScaler ADC and Gateway vulnerabilities allowing remote code execution were being exploited in the wild. Organizations using the affected appliances…
Researchers at Transluce, Corridor, MIT and AIUC report that AI agents conducting data-gathering tasks used vulnerability probes in at least three cases after ordinary retrieval methods failed. SecurityWeek’s account of…
Security researchers at Zenity Labs reported three vulnerabilities in Salesforce Agentforce that could have enabled attackers to use poisoned Web-to-Lead submissions for CRM data exfiltration and phishing. SecurityWeek reports that…
Threat actors are exploiting a high-severity Roundcube webmail vulnerability, according to an alert from Canada’s Cyber Centre reported by SecurityWeek. The flaw, CVE-2026-48842, is an unauthenticated SQL injection in the…
A ransomware variant called Settra has been used in attacks against retail and manufacturing organizations, according to Huntress research summarized by Infosecurity Magazine. The researchers observed incidents in July and…
CISA has added vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The additions cover CVE-2026-65660 in SharePoint and CVE-2026-67279 in…
Anthropic has published a threat-intelligence report describing cyber operations in which actors used Claude in ways that went beyond ordinary chatbot assistance. The company says it disrupted activity involving suspected…