https://threatfrontier.com/articles/floor-plan-from-image-to-3d-model-what-your-listing-gives-away ThreatFrontier.com en 2026-10-15T13:00:00.000Z Floor plan from image to 3D model: what your listing gives away https://threatfrontier.com/articles/gitlab-cve-2026-97229-cicd-regex-compiler-rce ThreatFrontier.com en 2026-10-15T11:40:24.837Z GitLab CVE-2026-97229: CVSS 10.0 Remote Code Execution in the CI/CD Regex Compiler https://threatfrontier.com/articles/microsoft-copilot-prompt-injection-rce-visual-studio-ssms-cve-2026-103572 ThreatFrontier.com en 2026-10-15T08:28:14.300Z Microsoft Patches Copilot Prompt-Injection RCE in Visual Studio and SSMS (CVE-2026-103572) https://threatfrontier.com/articles/ibm-mcp-context-forge-default-jwt-key-cve-2026-53709 ThreatFrontier.com en 2026-10-15T03:15:32.540Z IBM MCP Context Forge's Default JWT Key Let Anyone Forge Admin Tokens (CVE-2026-53709) https://threatfrontier.com/articles/openai-retires-gpt-4o-gpt-4-1-api-january-14-2027-gpt-6-luna ThreatFrontier.com en 2026-10-15T02:39:37.793Z OpenAI Retires GPT-4o and GPT-4.1 API Models on January 14, 2027: What to Do https://threatfrontier.com/articles/pan-os-cve-2026-0322-root-rce-cisa-kev ThreatFrontier.com en 2026-10-15T01:32:28.434Z PAN-OS CVE-2026-0322: Root RCE on Firewalls Now on CISA KEV https://threatfrontier.com/articles/cisco-secure-email-gateway-cve-2026-76519-exploited-root ThreatFrontier.com en 2026-10-15T01:24:21.496Z Cisco Secure Email Gateway Flaw Gives Attackers Root, and It Is Being Exploited https://threatfrontier.com/articles/gemini-free-flash-lite-ai-plus-loses-pro ThreatFrontier.com en 2026-10-14T16:52:21.306Z Gemini App Limits Cut: Free Users Get Flash-Lite Only, and AI Plus Loses Gemini Pro https://threatfrontier.com/articles/langflow-1-12-3-25-cves-two-unauthenticated-rce ThreatFrontier.com en 2026-10-14T16:52:12.503Z Langflow 1.12.3 Fixes 25 Flaws, Including Two Unauthenticated CVSS 9.8 Code-Execution Bugs https://threatfrontier.com/articles/minicpm-v-4-7-35b-moe-iphone-claim ThreatFrontier.com en 2026-10-14T16:51:45.519Z MiniCPM-V 4.7: OpenBMB Claims a 35B Vision MoE Runs at 13 Tokens a Second in 3 GB on an iPhone https://threatfrontier.com/articles/x-subscription-explained-cursor-grok-one-plan-claude-gpt-api-price ThreatFrontier.com en 2026-10-14T16:51:38.322Z The X Subscription Explained: Cursor and Grok in One Plan, and Claude or GPT Now Cost API List Price https://threatfrontier.com/articles/lfm2-5-24b-a2b-vs-qwen3-6-35b-a3b ThreatFrontier.com en 2026-10-14T16:50:17.606Z Liquid LFM2.5-24B-A2B vs Qwen3.6-35B-A3B: Better at Agents, Weaker at Coding https://threatfrontier.com/articles/vllm-0-31-code-revision-rce-tokenize-engine-crash ThreatFrontier.com en 2026-10-14T16:49:45.125Z vLLM 0.31.0 Fixes Remote Code Execution Through Request-Controlled code_revision, Plus Four Other Advisories https://threatfrontier.com/articles/reflection-beam-501b-weights-not-shipped ThreatFrontier.com en 2026-10-14T16:49:37.149Z Reflection Beam: A 501B Open-Weight MoE Claims 80.9 on SWE-bench Verified, but the Weights Have Not Shipped https://threatfrontier.com/articles/ai-floor-plan-generator-free-tiers-compared ThreatFrontier.com en 2026-10-14T13:00:00.000Z AI Floor Plan Generator Free Tiers Compared: Editable Plans and Code Checks https://threatfrontier.com/articles/claude-code-plugin-sha-pin-bypass-cve-2026-86063 ThreatFrontier.com en 2026-10-14T10:28:35.019Z CVE-2026-86063: Claude Code's Pinned Plugin SHA Check Could Be Bypassed With a Branch Name https://threatfrontier.com/articles/ivanti-connect-secure-zero-day-cve-2026-104935-exploited-cisa-sets-october-16-deadline ThreatFrontier.com en 2026-10-14T01:51:30.722Z Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited; CISA Sets October 16 Deadline https://threatfrontier.com/articles/dockhand-cve-2026-110130-js-suffix-auth-bypass ThreatFrontier.com en 2026-10-14T01:40:09.869Z Dockhand 1.0.45 fixes a CVSS 10 authentication bypass: any request path ending in .js skips login https://threatfrontier.com/articles/windows-shell-cve-2026-96951-motw-bypass-exploited ThreatFrontier.com en 2026-10-14T01:26:49.465Z Windows Shell Flaw CVE-2026-96951 Lets Crafted Files Dodge Mark of the Web, and Microsoft Says It Is Exploited