IncidentsExploitedCVE-2026-109618CVSS 9.25 min read
Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.
VulnerabilitiesCVE-2026-125881CVSS 9.34 min read
N-able says every unauthenticated flaw in the Able2Shell dump is fixed in N-central 2026.4 HF2, and that it has seen scanning but no compromise of hosted servers. The authenticated bugs are still open.
VulnerabilitiesExploitedCVE-2026-18577CVSS 8.24 min read
The vendor shut its hosted environments on November 9 and told on-premises customers to do the same, while it works on a hotfix. It says it hasn't seen exploitation in the wild.
VulnerabilitiesCVE-2026-125883CVSS 9.34 min read
N-able released N-central 2026.4 HF2 for seven flaws disclosed publicly on November 8, after taking hosted environments offline and telling on-premises customers to do the same.
VulnerabilitiesAnalysis3 min read
An independent researcher published details and proof-of-concept code for 33 issues in the RMM platform. N-able says it has seen scanning but no successful exploitation, and has no hotfix out yet.
ResearchBrief2 min read
OpenAI says the model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably, and reports 304 critical issues to maintainers with proposed fixes.
ResearchBrief1 min read
OpenAI says the model is its first rated "Critical" for cyber capability under its Preparedness Framework, and it isn't publicly available yet.
ResearchBrief2 min read
An unreleased OpenAI cyber model ran an autonomous pipeline against the kernel's master branch and produced working local privilege escalation exploits, at a cost of $1.2 million in API credits.
ResearchBrief2 min read
The company says a prototype found and analyzed 2,308 candidate Linux kernel findings and reproduced 1,724 of them, at $1.2 million in API costs.
VulnerabilitiesExploitedCVE-2026-104935CVSS 8.62 min read
Ivanti updated its advisory on October 29 to add a privilege escalation bug and a file upload bug, both now fixed and both in CISA's KEV list. Volexity says the chain was used against an appliance from October 3.
VulnerabilitiesCVE-2026-111585CVSS 8.82 min read
Security firm Remedio says an integer overflow in TeamViewer's screen processing can be triggered from inside an ordinary session, letting a hostile host crash or run code on the viewer's system. TeamViewer has patched it.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.21 min read
The agency told federal agencies to patch the kernel privilege escalation bug, which researchers say was used alongside two critical PHP flaws to root servers.
