Source: Dark Reading

5 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI safety & security 17 Threat actor 13 Industry 9 Malware 7 Phishing & fraud 6 Exploit / PoC 5 Vulnerability 4 Policy & legal 4 Research 3 Tools 2 Data breach 2 AI industry 1 Ransomware 1 AI policy 1

SeverityAll critical 1 high 13 medium 28 low 0 info 33 source: Dark Reading ✕

Nightmare-Eclipse Strikes Again with 'ShieldCrash' Windows Exploit

A researcher known as Nightmare-Eclipse published another zero-day exploit, dubbed ShieldCrash, targeting Windows Defender.

Dark Reading reports that the disgruntled researcher tracked as Nightmare-Eclipse continued a vendetta against Microsoft by publishing a new zero-day exploit named ShieldCrash for Windows Defender. The brief report does not detail affected versions, exploitation prerequisites, or whether exploitation has been observed.

Dark ReadingSep 10, 15:29 UTC · 5d agoExploit / PoC1

SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

New SonicWall SMA 1000 zero-days enable unauthenticated remote code execution, with exploitation observed following earlier summer attacks on other SonicWall edge zero-days.

Zero-day vulnerabilities in SonicWall's SMA 1000 secure access appliances allow unauthenticated remote code execution, and exploitation activity is being observed. This follows attacks earlier in the summer that abused two other zero-day vulnerabilities in SonicWall edge devices. Internet-facing appliances used for remote access make this an urgent patching priority for defenders.

Dark ReadingSep 2, 20:43 UTC · 13d agoExploit / PoC in the wild

Attackers Pounce on Critical Artifactory Bug Following Disclosure

Attackers began exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, shortly after disclosure, gaining admin-level access on affected systems.

CVE-2026-82329 is a critical authentication bypass in JFrog's Artifactory repository manager that enables attackers to gain admin-level access on affected systems. Exploitation started soon after the flaw's disclosure. Artifactory is widely used to manage software artifacts, making compromised instances a software supply chain risk.

Dark ReadingSep 1, 21:05 UTC · 14d agoExploit / PoC in the wild 2 sources CVE-2026-82329

Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise

Attacks exploiting CVE-2026-0768, a critical vulnerability in the Langflow low-code AI platform, are rising amid growing adversary attention this year.

CVE-2026-0768 is a critical vulnerability in Langflow, a low-code AI development platform, with exploitation attacks now rising. Dark Reading notes the platform has drawn increasing adversary attention in 2026. Organizations running exposed Langflow instances face elevated risk and should patch promptly and review instances for compromise.

Dark ReadingSep 1, 20:48 UTC · 14d agoExploit / PoC in the wildCVE-2026-07681

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

CISA gave US agencies three days to patch actively exploited Zimbra flaw CVE-2026-73570, which allows full takeover of user communications.

CISA set a three-day remediation deadline for federal agencies to patch CVE-2026-73570, a Zimbra vulnerability that enables full takeover of a user's communications. The flaw is being actively exploited, underscoring the shrinking window between disclosure and exploitation. Dark Reading frames the case as evidence defenders must accelerate patch cycles.

Dark ReadingAug 24, 21:46 UTC · 22d agoExploit / PoC in the wildCVE-2026-73570