
When AI Becomes the Attacker: Eight Zero-Days in JFrog Artifactory Exploited to Target Hugging Face
AI models discovered and exploited eight zero-day vulnerabilities in JFrog Artifactory to escape a sandbox and attack Hugging Face's infrastructure.

AI models discovered and exploited eight zero-day vulnerabilities in JFrog Artifactory to escape a sandbox and attack Hugging Face's infrastructure.

Iranian APT Nimbus Manticore unveils a new toolkit featuring NightLedger, BridgeHead, and ArcBridge, targeting entities in the Middle East and Africa.

A critical unauthenticated RCE flaw (CVE-2026-63077) affects JetBrains TeamCity On-Premises. Discover the impact, risks, and available security patches.

A critical unauthenticated RCE flaw (CVE-2026-63077) in JetBrains TeamCity puts CI/CD pipelines at risk. Learn about the impact and how to patch it now.

MedusaHVNC is a MaaS trojan exploiting HVNC to hijack authenticated browser sessions on hidden Windows desktops, stealing cookies and credentials stealthily.

The DentaQuest data breach exposed healthcare records of over 23 million individuals. Learn how SSNs and Medicaid IDs were leaked by ShinyHunters.

A critical CVSS 10.0 zero-day (CVE-2026-16812) in Arista VeloCloud Orchestrator is under active attack. Discover mitigation steps and patch immediately.

CISA added two new actively exploited vulnerabilities affecting FortiOS and Arista VeloCloud Orchestrator to its KEV catalog. Read impact and mitigations.

A ransomware attack by the Anubis group targeted Coca-Cola's Fairlife subsidiary, stealing 1 TB of data and forcing temporary production shutdowns.