An OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later.
SolarWinds has patched two RCE vulnerabilities in Observability Self-Hosted, affecting all versions up to 2026.2.3.
70
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 22, 2026
- Last mentionedSep 24, 2026
Timeline
5 articles · newest firstCISA: Ransomware gangs now exploiting critical TeamCity flaw
Ransomware gangs are exploiting a critical JetBrains TeamCity flaw (CVE-2026-63077) and are being used in ransomware attacks.
70
Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.
65
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
A crafted comment (Comment2Shell) allowed an attacker to run code on the server via a line break in an HTML attribute. Another flaw, Click2Shell, enabled theme installation and further code execution. WordPress has had…
70
Jun Kim, oMLX creator and maintainer, joins Hugging Face to support the MLX community
An anonymous comment can run code if an admin opens the page, using a crafted link to install a theme and execute commands with admin access. These are stack-based buffer overflow vulnerabilities in CGI of Zyxel…
40
Related CVEs
by mentions- CVE-2026-6307795%9.8Unauthenticated Deserialization RCE in JetBrains TeamCity On-Premises
- CVE-2026-93485<1%7.1Unauthenticated Stored DOM-Based XSS in WordPress Core Affecting 4.7–7.0
Appears with
- Microsoftvendor · 2
- JetBrainsvendor · 2
- JetBrainsorganization · 2
- a blogger named Swati Khandelwalvictim · 1
- Qwen3-235Bthreat actor · 1
- Click2Shellmalware · 1
- Comment2Shellmalware · 1
- SolarWindsvendor · 1
- TeamCityproduct · 1
- Scattered Spiderthreat actor · 1
- WordPress 4.7ai model · 1
- FBIorganization · 1
- OmegaLitevendor · 1
- Patchstackvendor · 1
- Ryukmalware · 1
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.