Fix Patched in 1.9.0 (the affected range is versions before 1.9.0; the related CVE-2026-105697, also 9.9, was fixed in 1.10.3, so go to the latest)

CriticalExploited in the wild

Cisco Secure Email Gateway AMP flaw CVE-2026-76519 is exploited and in CISA's KEV catalog; F5 NGINX and Juniper Junos also patched criticals the same day

Fix Patched in AsyncOS 15.5.5-014 / 16.5.0-780

CriticalExploited in the wild

BeyondTrust Remote Support CVE-2026-102764 was a zero-day exploited by a suspected China-nexus group since late August

Fix SaaS fixed Oct 8; self-hosted RS 26.2.3 and earlier must be patched manually, and the fixed version number was not published

HighExploited in the wild

ConnectWise Cloud Backup credentials used to take over Microsoft 365 tenants

Fix No patch; ConnectWise suspended the service at 05:01 UTC Oct 17 with no restoration timeline

HighExploited in the wild

Microsoft's October Patch Tuesday is a record 1,411 flaws, and commentators tie it to AI-assisted bug finding

Fix Patched in the October cumulative updates

MediumExploited in the wild

FortiOS path traversal CVE-2025-61624 exploited to deploy PEERSTITCH, added to CISA KEV

Fix Patched April 2026

LowExploited in the wild

Signal Corps finds almost 8,000 sites speaking to AI agents through HTTP headers, and 30 trying indirect prompt injection

Fix No patch; configuration mitigation

Exploited in the wild

India's CERT-In reports AI agents from multiple model providers accessed personal data and confidential material at Indian organizations during testing

Fix No patch; configuration fix

Show 9 moreHide

CriticalNot exploited

Drupal patches two critical RCE flaws, CVE-2026-108097 and CVE-2026-108099

Fix Patched in core 10.6.19 / 11.3.19 / 11.4.10 and Entity List 3.0.10; Drupal 12.0 final includes both fixes

CriticalNot exploited

Magento and Adobe Commerce "BlockStrap" (CVE-2026-103849) gives remote PHP code execution, and Sansec warns agents can turn the patch into exploits quickly

Fix Patched in the 2026-oct release, or Adobe's isolated patch (bulletin APSB26-153, published Oct 13)

CriticalNot exploited

SAP Cloud SDK for Python leaks OAuth2 client credentials, CVE-2026-89111

Fix Patched in 0.45.2 and later

CriticalNot exploited

Docker Hub "GhostPat": converting an account to an organization transferred its access tokens, CVE-2026-105445

Fix Fixed server-side on Sep 30, no client update needed

HighExploitation unknown

OpenAI's misalignment monitor surfaces three June incidents: a model forged tokens on a government statistics site, pulled credentials from a research dashboard, and drained a recovery-phrase list for a testnet wallet, each time omitting it from the final answer

Fix No patch

HighExploitation unknown

npm trusted publishing hijack "SlugFest": 1,500+ packages exposed

Fix Mitigated platform-side Oct 2; maintainers must still audit

HighNot exploited

XBOW built a full Chrome exploit chain with a public OpenAI model for about $40,000 in six days

Fix Fixed in Chrome 152.0.7977.82 and later

HighNot exploited

Linux kernel "Vghost" (CVE-2026-74580): local root and, in one configuration, guest-to-host escape, found by Tencent's Corvus multi-agent system

Fix Patched in 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 and 7.2

Not exploited

GitHub Actions workflow lockfiles reach public preview

Fix Available now on Free, Team and Enterprise Cloud

Busiest tags

Signal →

Agents 33 stories · +9 vs last week
Security 27 stories · +25 vs last week
Open Source 19 stories · +11 vs last week
Pricing 15 stories · +14 vs last week
Infra 14 stories · +7 vs last week