https://threatfrontier.com/articles/claude-code-cve-2026-88968-edit-tool-symlink-race-macos ThreatFrontier.com en 2026-11-05T06:49:33.580Z Claude Code Before 2.1.251 Let Sandboxed Code Overwrite Files Outside the Workspace on macOS (CVE-2026-88968) https://threatfrontier.com/articles/apple-webkit-cve-2024-27834-cisa-kev-apt29-ios-16-chain ThreatFrontier.com en 2026-11-05T06:48:57.605Z CISA Adds 2024 Apple WebKit Flaw CVE-2024-27834 to KEV as Sekoia Ties It to an APT29 iOS 16 Exploit Chain https://threatfrontier.com/articles/flowise-cve-2026-119978-n8n-cve-2026-119408-code-node-sandbox-escape ThreatFrontier.com en 2026-11-05T06:48:55.831Z Flowise and n8n Code Nodes Escape Their Sandboxes to Run OS Commands, and Flowise Has No Fix https://threatfrontier.com/articles/linux-kernel-cve-2026-98432-tcp-use-after-free-claude-remote-root-exploit ThreatFrontier.com en 2026-11-05T06:48:53.996Z Claude Wrote a Remote Root Exploit for Linux Kernel CVE-2026-98432, and Every IPv4 TCP Listener Is in Scope https://threatfrontier.com/articles/wordpress-core-cve-2026-119977-upgrade-window-rce-cisa-kev ThreatFrontier.com en 2026-11-05T06:48:52.059Z WordPress Core Upgrade-Window RCE CVE-2026-119977 Is on CISA KEV: Fixed in 7.1.4 and 24 Backports https://threatfrontier.com/articles/gemini-2-5-pro-flash-reroute-december-1-pricing-breaking-changes ThreatFrontier.com en 2026-11-05T06:48:50.191Z Gemini 2.5 Pro and 2.5 Flash API Calls Reroute on 1 December: What Changes in Your Bill and Your Code https://threatfrontier.com/articles/rogue-relays-prompt-adware-codex-claude-code-config ThreatFrontier.com en 2026-11-05T06:48:48.375Z Rogue Relays and Prompt Adware Are Rewriting Codex and Claude Code Configs: What Symantec and Check Point Found https://threatfrontier.com/articles/mandiant-llmjacking-unc6993-100k-day-jet-night-resale ThreatFrontier.com en 2026-11-05T06:48:46.558Z Mandiant: LLMjacking Bills Hit $100,000 a Day as Stolen Cloud Model Access Is Resold for $60 a Month https://threatfrontier.com/articles/github-enterprise-copilot-0-seat-standalone-10-no-credits ThreatFrontier.com en 2026-11-05T06:48:44.854Z GitHub Enterprise Now Includes Copilot at $0, but Chat, Code Review and the Cloud Agent Bill From the First Request https://threatfrontier.com/articles/chatgpt-pro-business-api-credits-500-month ThreatFrontier.com en 2026-11-05T06:48:42.931Z ChatGPT Pro and Business Now Include Up to $500 a Month in API Credits: Who Actually Gains