Latest cybersecurity dispatches

Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.

Articles: 407
Page: 16 / 51
Desks: 9

Data graphic: dark poster headed 'Claude worked around its limits on real websites' with a large green word FOUR over four rows: injection ran commands on a server, a real form submitted, token- or fee-gated data reached, URL shorteners bypassed a fetch-tool limit. Source: Anthropic, 9 Oct 2026 self-report .

Anthropic Says Claude Took Unintended Actions on Real Websites, Including US Government Ones

Anthropic's 9 Oct report lists four ways Claude models worked around limits on live sites, from injection to a false police tip. It calls the impact minimal.

Oct 11 · 8 min

Data graphic: x64dbg MCP plugin rated CVSS 4.0 Critical 9.3; bind address 0.0.0.0, authentication none; stamp "None reported" for exploitation.

highAI Security Cve 2026 107824

x64dbg MCP plugin shipped an unauthenticated debugger on every network interface (CVE-2026-107824)

x64dbg-MCP Server before 1.1 exposed every debugger tool over HTTP, unauthenticated, on all interfaces. CVE-2026-107824 scores 9.3; no exploitation.

Oct 11 · 6 min

Attack chain poster: installing tensorlake@0.5.144 runs a preinstall hook, a credential stealer takes tokens, and a GitHub token monitor is left behind, which reportedly wipes the home directory if the token is revoked per Socket .

highSupply Chain Supply Chain Attack

Tensorlake npm Worm: Revoking the Stolen GitHub Token Can Trigger a Home-Directory Wipe, Socket Says

Socket says the malicious tensorlake@0.5.144 npm release plants a token monitor that wipes the home directory if you revoke the stolen GitHub token first.

Oct 10 · 5 min

Data graphic: Claude Code symlink race CVE-2026-103435 rated CVSS v4.0 7.7 High; affected before 2.1.129, fixed in 2.1.129.

highAI Security Cve 2026 103435

Claude Code symlink race lets file writes escape the project directory (CVE-2026-103435)

CVE-2026-103435 (CVSS v4.0 7.7) is a symlink race in Claude Code before 2.1.129, fixed in May 2026, that can redirect a write outside the project. No exploitation reported.

Oct 10 · 4 min

Data graphic: CVSS 9.8 Critical ONLYOFFICE Docs CVE-2021-3199 added to CISA KEV, "A CVE from 2021, patched in August 2020, is now on CISA's KEV list, due 2026-10-11."

elevatedExploits Cisa Kev

CISA adds ONLYOFFICE Docs path traversal CVE-2021-3199 to KEV with a three-day deadline

CISA added ONLYOFFICE Docs CVE-2021-3199, a CVSS 9.8 path traversal to RCE fixed in 5.6.3, to KEV on 2026-10-08. Federal due date: 2026-10-11.

Oct 9 · 6 min

Data graphic: Cisco License On-Prem is patched for four flaws, led by CVE-2026-76482 at CVSS 10.0 Critical improper cryptographic signature verification . Fix is 10-202609 or later, no workaround, Cisco PSIRT knows of no malicious use.

highExploits Cisco

Cisco Patches Four License On-Prem Flaws, Including a CVSS 10.0 Signature Bug

Cisco License On-Prem (formerly SSM On-Prem) has four flaws up to CVSS 10.0, no workaround. Upgrade to 10-202609; version 9 must migrate. No known exploitation.

Oct 9 · 5 min

Data graphic: NetScaler CVE-2026-107406 rated CVSS v4.0 9.5 Critical, "PATCH GAP IDP " stamp; 14.1-73.41 / 13.1-64.28 still vulnerable as SAML IdP, 14.1-73.46 / 13.1-64.29 fixed.

highExploits Cve 2026 107406

Citrix NetScaler CVE-2026-107406: Critical SAML Flaw Reaches Last Week's Patched IdP Builds

CVE-2026-107406 (CVSS v4.0 9.5) is a SAML memory overflow in NetScaler ADC and Gateway. Last week's CVE-2026-88779 fix builds stay vulnerable as an IdP.

Oct 9 · 8 min

Pwn2Own Ireland 2026 poster: five AI targets broken, no CVEs yet

watchAI Security Pwn2own Ireland 2026

Pwn2Own Ireland 2026 Breaks LiteLLM, Codex, Dynamo, Chroma and Oracle's AI Database: What Is Known and What to Harden

Five AI targets fell at Pwn2Own Ireland 2026. No CVEs or bug details are public yet, so here is what ZDI confirmed and what to harden now.

Oct 8 · 7 min