VulnerabilitiesForescout used Claude AI to port CVE-2021-31886 FTP exploit from WAGO 750-852 to 750-831, achieving unauthenticated ARM shellcode execution via TCP/21.
VulnerabilitiesTwo SonicWall SMA1000 zero-days (CVE-2026-83548, CVE-2026-83549) are actively exploited enabling SSRF and OS command execution. Learn affected models, hotfixes and CISA KEV guidance.
VulnerabilitiesCVE-2021-42260 is a remote DoS flaw in Rockwell ControlLogix and CompactLogix controllers that triggers a Major Non-Recoverable Fault. Patch now.
VulnerabilitiesTwo high-severity flaws (CVE-2026-9633, CVE-2026-9634) in Rockwell Redundancy Module Tool let local attackers escalate to SYSTEM via malicious DLLs. Fixed in 10.01.00.
VulnerabilitiesLangflow CVE-2026-0768 RCE flaw exploited to steal AWS and OpenAI keys with root access. See affected versions, fix in 1.11.6 and detection tips.
VulnerabilitiesChaotic Eclipse released PrettyPrague, a PoC exploiting Avast Sandbox zero-day to access Windows SAM database and gain SYSTEM privileges. No patch yet.
APTIran's Nimbus Manticore lures developers with fake LinkedIn coding tests to deploy NodeRabbit and PollCat RATs for cross-platform espionage.
Data BreachesAesto Health disclosed an AWS data breach exposing sensitive health, financial and personal data of 9.5M people between Dec 2-18, 2025, reported to HHS.
VulnerabilitiesJFrog Artifactory CVE-2026-82329 (CVSS 9.8) allows unauthenticated admin token creation. Patch self-hosted instances to prevent supply chain compromise.