https://threatfrontier.com/articles/nemotron-3-5-bolt-vs-super-vl-hardware-24gb-dgx-spark ThreatFrontier.com en 2026-10-18T15:33:23.833Z Nemotron 3.5 Bolt vs Super VL: what you need to run each, from a 24 GB GPU to a DGX Spark https://threatfrontier.com/articles/openai-misalignment-reports-agents-forged-tokens-147451-rows ThreatFrontier.com en 2026-10-18T15:29:59.107Z OpenAI's incident reports: training agents forged tokens on a government site and pulled 147,451 rows https://threatfrontier.com/articles/zimbra-rapid7-five-cves-public-poc-two-unpatched ThreatFrontier.com en 2026-10-18T15:28:27.968Z Rapid7 publishes five Zimbra flaws with public exploit scripts; two remain unpatched https://threatfrontier.com/articles/dirtyclone-cve-2026-43503-snap-confine-cve-2026-3888-metasploit ThreatFrontier.com en 2026-10-18T15:28:02.240Z DirtyClone and snap-confine exploits land in Metasploit: any local shell becomes root on unpatched Linux and Ubuntu https://threatfrontier.com/articles/mcp-server-cves-netlicensing-unla-mac-shell-mcp-python-sdk ThreatFrontier.com en 2026-10-18T15:27:42.315Z Three MCP servers and the Python SDK shipped holes this week: here is what each hands an attacker https://threatfrontier.com/articles/github-copilot-retires-opus-4-8-opus-5-gpt-5-6-terra-november-16 ThreatFrontier.com en 2026-10-18T15:27:36.432Z GitHub Copilot drops Opus 4.8, Opus 5 and GPT-5.6 Terra on 16 November: what each plan switches to https://threatfrontier.com/articles/sap-visual-composer-cve-2026-89110-october-2026-patch-day ThreatFrontier.com en 2026-10-18T15:27:35.190Z SAP Patch Day: another critical 9.9 in NetWeaver Visual Composer, the component behind the 2025 zero-day attacks https://threatfrontier.com/articles/anthropic-small-open-weight-models-self-replication-iot ThreatFrontier.com en 2026-10-18T15:27:06.573Z Anthropic tests small open-weight models on self-replication: GLM-5.2 spread to 8 of 8 devices https://threatfrontier.com/articles/weballiance-ecommerce-cve-2026-108065-unpatched-sql-injection ThreatFrontier.com en 2026-10-18T15:27:04.475Z Unpatched SQL injection in Channel Software WebAlliance eCommerce: block /preapproval.asmx https://threatfrontier.com/articles/nginx-ui-mcp-config-validation-bypass-cve-2026-84318 ThreatFrontier.com en 2026-10-18T15:25:26.745Z Nginx UI's MCP tools skipped the config checks its web UI enforces, handing logged-in users nginx code execution https://threatfrontier.com/articles/ny-raise-act-digit-registration-november-2026 ThreatFrontier.com en 2026-10-18T15:24:16.091Z New York's RAISE Act: frontier AI developers register with DIGIT from November, duties start 1 January https://threatfrontier.com/articles/gemini-4-argon-api-price-doubles-december-1 ThreatFrontier.com en 2026-10-18T15:23:59.420Z Gemini 4 Argon's API price doubles on 1 December: what $2/$10 becomes, and where you can use it https://threatfrontier.com/articles/vllm-0-32-upgrade-notes-dos-fixes-cors-python-3-11 ThreatFrontier.com en 2026-10-18T15:22:19.200Z vLLM 0.32 upgrade notes: three denial-of-service fixes, CORS closed by default, Python 3.10 dropped https://threatfrontier.com/articles/ollama-windows-cve-2026-42249-metasploit-persistence-module ThreatFrontier.com en 2026-10-18T15:21:40.269Z Metasploit now ships a persistence module for Ollama's Windows auto-updater https://threatfrontier.com/articles/cert-in-ciad-2026-0049-ai-agents-read-live-indian-systems ThreatFrontier.com en 2026-10-18T15:21:35.220Z CERT-In warns AI agents read live Indian business systems through exposed credentials https://threatfrontier.com/articles/junie-cli-zcode-mcp-config-rce-cve-2026-111091-cve-2026-88755 ThreatFrontier.com en 2026-10-18T15:20:45.743Z Two coding agents, one mistake: Junie CLI and ZCode both ran MCP servers from untrusted repos https://threatfrontier.com/articles/n-able-n-central-cve-2026-86218-metasploit-module ThreatFrontier.com en 2026-10-18T15:20:39.497Z Metasploit module lands for N-central pre-auth RCE CVE-2026-86218, already on CISA's KEV list https://threatfrontier.com/articles/cisco-nx-os-hardening-cve-2026-76455-ai-found-flaws ThreatFrontier.com en 2026-10-18T15:20:34.333Z Cisco fixes six NX-OS flaws found with the help of frontier AI, two rated 9.8 https://threatfrontier.com/articles/claude-opus-5-5-fast-mode-out-of-preview-8-40-pricing ThreatFrontier.com en 2026-10-18T15:18:13.566Z Claude Opus 5.5 fast mode is out of preview: $8/$40 per MTok, twice the standard price https://threatfrontier.com/articles/deepseek-search-fetch-api-pricing-october-31 ThreatFrontier.com en 2026-10-18T15:16:44.777Z DeepSeek starts charging for Search and Fetch on 31 October: $0.75 per 1,000 calls https://threatfrontier.com/articles/how-to-calculate-square-feet-of-a-room-we-tested-five-ai-models ThreatFrontier.com en 2026-10-18T13:00:00.000Z How to calculate square feet of a room: we tested five AI models https://threatfrontier.com/articles/deepseek-v4-1-flash-1017-mit-weights-510-gb-download ThreatFrontier.com en 2026-10-18T02:52:25.810Z DeepSeek V4.1-Flash-1017 Ships MIT Weights and Stronger Agentic Scores; the Official Files Run to About 510 GB https://threatfrontier.com/articles/muse-spark-open-816b-hardware-licence-benchmarks ThreatFrontier.com en 2026-10-17T02:48:23.428Z Muse Spark Open: 1 TB for Meta's Mac setup, ~300 GB at 2-bit, and a licence that isn't Apache https://threatfrontier.com/articles/aoki-infostealer-claude-codex-cursor-copilot-credentials ThreatFrontier.com en 2026-10-17T02:28:46.037Z Aoki infostealer now goes after Claude, Codex, Cursor and Copilot credentials https://threatfrontier.com/articles/claude-agent-sdk-python-resume-argument-injection-cve-2026-96620 ThreatFrontier.com en 2026-10-17T01:49:46.912Z Claude Agent SDK for Python flaw lets a crafted session ID run commands (CVE-2026-96620) https://threatfrontier.com/articles/beyondtrust-remote-support-zero-day-cve-2026-102764-armory-castle ThreatFrontier.com en 2026-10-16T23:11:30.062Z BeyondTrust Remote Support Zero-Day CVE-2026-102764 Exploited Since August https://threatfrontier.com/articles/peerstitch-fortigate-implant-fortimanager-cve-2024-47575 ThreatFrontier.com en 2026-10-16T23:11:25.059Z PEERSTITCH: A Memory-Only FortiGate Implant Built on the 2024 FortiManager Breach