Find what you’re looking for
Browse everything
6,877 results in Threat Reports
GhostJacking: Unveiling AI Agent Security Vulnerabilities
In August 2026, Tenet Security unveiled 'GhostJacking,' a sophisticated attack technique exploiting AI agents' reliance on trusted data sources. By embedding malicious instructions into security alerts, logs, and error reports, attackers can manipulate AI agents to execute unauthorized actions, including code execution, credential theft, and infrastructure takeover. Demonstrations highlighted vulnerabilities in platforms like Cloudflare, Datadog, and Sentry, where AI agents misinterpreted poisoned data as legitimate commands, leading to significant security breaches. This incident underscores the critical need for robust identity governance and operational safeguards in AI agent deployments. As AI systems become integral to organizational operations, ensuring they can discern and resist malicious manipulations is paramount to maintaining security and trust.
Critical Metabase SQL Injection Zero-Day Vulnerability Discovered
In August 2026, Metabase disclosed a critical SQL injection vulnerability affecting versions 1.58 and above of its Cloud platform. This flaw allowed remote attackers to inject SQL statements into the application database, granting them administrator access. Exploiting this access, attackers could alter configurations, steal stored credentials, and access connected databases. Metabase promptly blocked the exploited endpoints and released patches to address the vulnerability. Self-hosted instances with exposed /api/session/reset_password endpoints remained at risk until updated. This incident underscores the persistent threat posed by SQL injection vulnerabilities, which continue to be prevalent despite longstanding awareness. Organizations are reminded of the importance of implementing prepared statements and other secure coding practices to mitigate such risks.
BdThemes Supply Chain Attack: A New Vector in WordPress Plugin Compromises
In August 2026, a sophisticated supply chain attack targeted BdThemes, a WordPress plugin vendor, compromising multiple plugins without altering their source code. Attackers exploited a cross-site scripting (XSS) vulnerability in the Biggopti component, which fetched promotional banners via a JSON API. By poisoning the JSON data stream, they injected malicious scripts that executed within the WordPress admin dashboard, leading to the creation of rogue administrator accounts and deployment of web shells. This breach affected plugins with over 100,000 active installations, prompting WordPress to temporarily disable their downloads. This incident underscores the evolving nature of supply chain attacks, where adversaries manipulate external data sources to compromise systems without direct code modifications. It highlights the critical need for organizations to scrutinize all components of their software supply chain, including third-party APIs and data streams, to mitigate such vulnerabilities.
Cyberattack on Polish Power Plant via Private Cellular Network - 2025
In December 2025, a coordinated cyberattack targeted Poland's energy infrastructure, including over 30 renewable energy farms and a major combined heat and power (CHP) plant supplying heat to nearly 500,000 residents. Attackers exploited vulnerabilities in private cellular networks, gaining unauthorized access to industrial control systems (ICS) and deploying wiper malware aimed at sabotaging operations. Despite the sophisticated nature of the attack, prompt response measures prevented significant service disruptions. This incident underscores the escalating threat landscape facing critical infrastructure, highlighting the need for robust cybersecurity measures in industrial environments. The attack's timing, during severe winter conditions, emphasizes the potential human and economic impact of such cyber threats.
Gunra Ransomware Exploits Fortinet and Schneider Electric Vulnerabilities
In August 2026, cybersecurity agencies from South Korea and the U.S. issued warnings about Gunra ransomware attacks targeting critical infrastructure sectors worldwide. The attackers exploited vulnerabilities in Schneider Electric PowerLogic P5 (CVE-2024-5559) and Fortinet FortiOS and FortiProxy (CVE-2025-24472) appliances to gain initial access. Employing a double extortion model, they encrypted data and exfiltrated sensitive information, threatening to publish it unless a ransom was paid within five to seven days. Since its emergence in April 2025, Gunra has listed 51 victims, primarily in South Korea, Brazil, Spain, Thailand, and Hong Kong. The group utilizes phishing campaigns and advanced encryption methods like Salsa20 and ChaCha20 to execute their attacks. This incident underscores the evolving tactics of ransomware groups, highlighting the critical need for organizations to promptly patch known vulnerabilities and implement robust security measures to protect against such sophisticated threats.
GhostSplice: Unveiling the Exploitation of AI Coding Assistants via Malicious MCP Servers
In August 2026, the ASSET Research Group disclosed 'GhostSplice,' a technique exploiting AI coding assistants connected via the Model Context Protocol (MCP). Malicious MCP servers can fragment exfiltration instructions into innocuous parts, embedding them within tool descriptions and results. This method enables AI agents to inadvertently collect and transmit sensitive data, such as SSH keys and proprietary source code, without detecting the malicious intent. The attack assumes prior connection to the attacker's MCP server and access to the targeted files. This incident underscores the evolving sophistication of attacks targeting AI-integrated development environments. As AI coding assistants become more prevalent, ensuring robust validation of external tool integrations and enhancing security protocols within AI agents is imperative to prevent unauthorized data exfiltration.
Exploiting Windows 11 Plug and Play: A Path to SYSTEM-Level Access
In August 2026, security researchers Alejandro Hernando and Borja Martinez unveiled a method to exploit Windows Plug and Play (PnP) auto-installation processes, enabling unprivileged users to achieve SYSTEM-level code execution on fully updated Windows 11 systems. By emulating specific USB devices, they triggered the installation of signed vendor software containing vulnerabilities, which they chained to escalate privileges. Notably, this attack vector can be executed both physically and remotely via Remote Desktop Protocol (RDP) when USB redirection is enabled. This discovery underscores the critical need for organizations to scrutinize device installation processes and enforce strict policies on USB device usage and redirection settings. The ability to escalate privileges through such mechanisms highlights potential gaps in endpoint security, emphasizing the importance of comprehensive monitoring and control over peripheral device interactions.
Unveiling North Korean IT Worker Infiltration Tactics in Crypto Startups
In August 2026, security researchers created a fictitious cryptocurrency startup, Ballena Azul, to investigate the infiltration tactics of suspected North Korean IT operatives. They advertised developer positions and successfully hired three individuals who provided falsified identification documents, including driver's licenses and bank account details. The operatives gained legitimate access to the company's virtual machines, which were monitored to observe their activities. Initial actions included system reconnaissance and the installation of remote desktop tools, indicating potential for unauthorized data access and exfiltration. This operation underscores the sophisticated methods employed by North Korean actors to infiltrate organizations under the guise of legitimate employment. The incident highlights the urgent need for enhanced identity verification processes, especially in remote hiring scenarios, to prevent unauthorized access and potential data breaches. Organizations are advised to implement periodic identity checks, in-person verifications, and comprehensive recruiter training to mitigate such risks.
Malicious SIM Cards Exploit IoT Device Modems - August 2026
In August 2026, researchers from the University of Birmingham and security firm Fuzzware discovered that malicious SIM cards can execute attacker-controlled commands within the modems of cellular IoT devices, such as electric vehicle chargers, industrial routers, and car telematics units. Testing 26 devices, they found that 9 were vulnerable, including certain models from OPPO and ASUS. The vulnerability stems from the 'RUN AT' proactive command, which allows a SIM card to instruct the modem to execute AT commands, potentially leading to full device compromise. This issue predominantly affects machine-to-machine hardware, with several Quectel modules identified as susceptible. The researchers recommend disabling or hardening the 'RUN AT' interface to mitigate this risk. This discovery underscores the critical need for robust security measures in IoT devices, especially as they become more integrated into essential infrastructure. The ability for a SIM card to control device modems highlights a significant attack vector that could be exploited if not properly addressed.
Mozilla's Proactive Key Revocation: A Lesson in Supply Chain Security
In August 2026, Mozilla revoked the cryptographic signing key used for Linux distributions of Firefox and Thunderbird after an unencrypted copy was inadvertently committed to a private code repository. Although the repository was private and audit records showed no unauthorized access, Mozilla proactively revoked the key to maintain security integrity. This revocation affects users who manually verify downloads and those using Mozilla's RPM packages, necessitating the import of a new key and the revocation of the old one. The new subkey, valid until August 5, 2028, ensures continued trust in Mozilla's software distributions. This incident underscores the critical importance of secure key management practices within software supply chains. As supply chain attacks become more prevalent, organizations must implement stringent controls to prevent unauthorized access and potential compromises, thereby safeguarding the integrity of their software products.
OpenAI's GPT-5.6-Cyber: A Leap Forward in AI-Driven Cybersecurity
In August 2026, OpenAI introduced GPT-5.6-Cyber, a specialized AI model designed to enhance cybersecurity tasks such as vulnerability research, penetration testing, and incident response. Built upon GPT-5.6 Sol, this model reduces refusals for high-risk, dual-use cyber tasks, achieving a 95% completion rate for complex cybersecurity requests. Notably, GPT-5.6-Cyber identified CVE-2026-15903, a critical out-of-bounds read and write vulnerability in the V8 JavaScript engine, which could allow remote code execution via crafted HTML pages. This vulnerability was promptly patched by Google in mid-July 2026. The release of GPT-5.6-Cyber underscores the growing integration of AI in cybersecurity, providing defenders with advanced tools to proactively identify and mitigate vulnerabilities. This development highlights the importance of balancing AI capabilities with safety measures to prevent potential misuse, as AI models become increasingly adept at both offensive and defensive cyber operations.
Critical Python Privilege Escalation Vulnerability (CVE-2026-12003) Discovered
In June 2026, a critical vulnerability (CVE-2026-12003) was identified in Python versions 3.11.0a3 through 3.15.0b2, affecting Windows installations. This flaw allowed low-privilege users to execute arbitrary code with elevated privileges by exploiting improper handling of the VPATH variable, leading to unauthorized access to alternative library folders. The vulnerability was introduced in December 2021 and publicly disclosed on June 16, 2026. ([securityvulnerability.io](https://securityvulnerability.io/vulnerability/CVE-2026-12003?utm_source=openai)) This incident underscores the importance of securing software installation paths and the need for organizations to promptly apply security patches to prevent privilege escalation attacks. The Python Software Foundation has released updates to address this issue, and users are advised to upgrade to the latest versions to mitigate potential risks.