Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20133 | Actively Exploited Information Disclosure in Cisco Catalyst SD-WAN Manager | 7.5 | 35% | KEV | KEV |
| CVE-2026-21876 | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls | 5.3 | 17% | PoC | |
| CVE-2026-28950 | A logging issue was addressed with improved data redaction | 6.2 | 3% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | file.io | Slack workspaces, Discord servers, Outlook drafts, and the file.io sharing service. Google brings instant email verification t |
From the original article
13 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engineering and security teams can see what an attacker would do in their specific environment.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.