Recent Advisories

Severity ID Title Vendor Product Date Type
NONE SCHNEIER:50F4F7...

Anthropic’s Fable 5 Model Jailbroken Within Days_SCHNEIER:50F4F7230D43E3BC04D9A48F355AFA7C

Fable 5 is the supposed safe version of Anthropic's Mythos Preview, with guardrails to ensure that it can't be used to create cyberattacks. Well, ...

N/A N/A SCHNEIER
NONE HACKREAD:A12835...

The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027_HACKREAD:A12835505DD5B7C87C9F7B3FCD193AAD

Learn how AI, deepfakes, synthetic identities and fraud-as-a-service may reshape iGaming risk, and what security teams can do to detect future thre...

N/A N/A HACKREAD
NONE THN:C8E3569189F...

Agentic AI: The Weapon That No Longer Needs a Warrior_THN:C8E3569189F8451F92B2576E7286E31A

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5YrdKJuy4ZmnWf_7L2RdXqS2QWC2BHJIbGsapJLmmYy1hBXfHxE7WMk-itWDkh-oCbAr8-CZOiUTyLftdM6...

N/A N/A THN
MEDIUM 4.1 CVE-2026-4983

CVE-2026-4983_CVE-2026-4983

Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xml withou...

Eclipse Foundation Eclipse Open VSX 0.1.0 CVE
NONE H1:3817602

Node.js: Node –run POSIX positional argument escaping allows shell command injection_H1:3817602

# ## Summary Node.js `node --run -- ` attempts to append positional arguments to a package script after escaping each argument for the shell. ...

N/A N/A HACKERONE
NONE 2E49ED4C-95C2-

xss-popup_2E49ED4C-95C2-540D-893B-E9DF48B970B0

No description provided...

N/A N/A GITHUBEXPLOIT
NONE MALWAREBYTES:7C...

GTA 6 early access is nothing but a scam_MALWAREBYTES:7CB2ABF9358B2CC6AB7D7DF22F16C745

A new wave of scam websites is offering something millions of people want: a way to play Grand Theft Auto VI before it comes out. _" Get GTA 6 be...

N/A N/A MALWAREBYTES
CRITICAL 9 CVE-2026-11374

Account Takeover via Predictable SSO Ticket Generation_CVE-2026-11374

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that sessi...

zohocorp manageengine_adselfservice_plus CVE
CRITICAL 9.9 0D199316-3A4E-

exploit-arsenal_0D199316-3A4E-538E-8E6B-0CDCCF55C354

CVE Proof-of-Concept Collection Clean, dependency-free Python 3 proof-of-concept exploits for recent CVEs — each with a concise write-up and a scre...

N/A N/A GITHUBEXPLOIT
NONE THN:0860E9752FE...

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT_THN:0860E9752FEC58321D74A703FD67C25B

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiENcFC1DFPXKuRCT_WmSwq-wpzC8IcZUdZzu5IHi597n77W8LFs9qSUdDPCuMK9QzkRZEBMbBh4p2xhnI1OX...

N/A N/A THN