https://threatfrontier.com/articles/langflow-metasploit-modules-cve-2026-10134-unauthenticated-rce ThreatFrontier.com en 2026-10-24T21:15:23.744Z Metasploit Adds Six Langflow Modules, Including a CVSS 10.0 Unauthenticated RCE https://threatfrontier.com/articles/ornith-1-5-122b-vs-sage-a1-5-vram-quant-fit ThreatFrontier.com en 2026-10-24T21:14:44.569Z Ornith-1.5-122B vs Sage-A1.5: Which Open Coding Model Fits Your 16, 24, 32 or 128 GB Machine https://threatfrontier.com/articles/monst3r-ai-autonomous-pentest-stolen-ai-api-keys-bitsight ThreatFrontier.com en 2026-10-24T21:14:01.330Z MONST3R-AI Rents Out Autonomous Pentests on Stolen OpenAI, Anthropic and Google Keys https://threatfrontier.com/articles/ai-agent-platforms-shell-cves-db-gpt-langchain-chatchat-opensre ThreatFrontier.com en 2026-10-24T21:13:43.693Z Five Open-Source AI Agent Platforms Hand a Shell to Anyone Who Can Reach Them or Feed Them Text https://threatfrontier.com/articles/pan-os-globalprotect-cve-2026-0257-qilin-inc-ransomware ThreatFrontier.com en 2026-10-24T21:13:32.284Z Qilin and Inc Ransomware Walk Through a Patched GlobalProtect Hole, CVE-2026-0257, Straight Past MFA https://threatfrontier.com/articles/claude-duet-pro-max-waitlist-usage-limits ThreatFrontier.com en 2026-10-24T21:13:23.027Z Claude Duet Opens to US Pro and Max by Waitlist, and Its Background Work Draws on Your Limits https://threatfrontier.com/articles/litellm-1-107-0-pypi-supply-chain-compromise-credential-stealer ThreatFrontier.com en 2026-10-24T21:13:17.191Z Poisoned LiteLLM 1.107.0 Stole Cloud, AI-Provider and SSH Credentials for About Two Hours https://threatfrontier.com/articles/cisco-expressway-cve-2026-76466-hard-coded-credential-root-rce ThreatFrontier.com en 2026-10-24T21:13:12.096Z Cisco Expressway Clusters Carry a Hard-Coded Credential Flaw: Unauthenticated Root RCE, No Workaround https://threatfrontier.com/articles/nextcloud-collabora-code-cve-2026-110447-webshells-cisa-kev ThreatFrontier.com en 2026-10-24T21:13:06.848Z Nextcloud's Built-in Collabora Server Is Being Used to Plant Webshells, and Disabling the App Does Not Fix It https://threatfrontier.com/articles/kimi-k3-1-pro-pricing-api-membership-vs-claude-chatgpt ThreatFrontier.com en 2026-10-24T21:13:01.533Z Kimi K3.1 Pro Cuts Moonshot's API Price to $2/$10 per Million Tokens, Matching Claude Sonnet 5.5 on Paper https://threatfrontier.com/articles/stock-house-plans-vs-ai-generated-plans-code-check ThreatFrontier.com en 2026-10-24T13:00:00.000Z Stock House Plans vs AI-Generated Plans: What a Code Check Catches https://threatfrontier.com/articles/arista-velocloud-orchestrator-cve-2026-114625-sql-injection-exploited ThreatFrontier.com en 2026-10-22T23:30:57.093Z Arista VeloCloud Orchestrator SQL Injection CVE-2026-114625 Is Under Active Attack, and Any Read-Only Login Is Enough https://threatfrontier.com/articles/recursive-flint-local-hardware-gguf-quant-16gb-24gb-128gb ThreatFrontier.com en 2026-10-22T23:24:51.511Z Recursive Flint on Local Hardware: Which Quant Fits 16, 24 and 128 GB https://threatfrontier.com/articles/openai-12-hour-prompt-caching-break-even-gpt-6-astra-luna-sol ThreatFrontier.com en 2026-10-22T23:22:44.327Z OpenAI's 12-Hour Prompt Cache: Break-Even Math for GPT-6 Astra, Luna and Sol https://threatfrontier.com/articles/php2shell-cve-2026-109618-cve-2026-109619-php-rce-pan-os-expressway ThreatFrontier.com en 2026-10-22T23:20:57.775Z PHP2Shell: Two Pre-Auth PHP RCEs Are Patched, but PAN-OS, Panorama and Cisco Expressway Still Wait