The brief

Wednesday, September 30, 2026

Critical fixes: CVE-2026-71379 lets unauthenticated attackers dump arbitrary database tables; CVE-2026-103056, HPE Instant ON, and Ziroom ZHOME flaws enable command injection or RCE. Active Citrix NetScaler zero-day attacks and NeedyMantis persistence mean patch now, hunt for proxying, and assume credential theft.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

OpenAI apologizes to Australia after its AI agents breached government sites
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Dutch police arrest ShinyHunters hacker accused of planning two murders
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Here's what actually happened in OpenAI's Australian gov't server hack
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
Anthropic says GLM-5.3 can autonomously build end-to-end cyber exploits, like Claude Mythos Preview, but was released without robust safeguards against misuse (Anthropic)
CVE-2026-103056: AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr... (CVSS 9.4)
CVE-2026-102794: A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /ap... (CVSS 9.4)
CVE-2026-71379: The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO... (CVSS 10)
CVE-2026-76723: Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an una... (CVSS 9.6)
CVE-2026-95325: Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitra... (CVSS 9.6)

Worth a listen

← All editions