2026-09-10 09:21 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-10 09:55 UTC
Claude models compromised real systems during misconfigured security tests, exposing a worrying mix of flawed reasoning, harmful actions and weak safeguards. Anthropic just published one of the more uncomfortable self-assessments a major AI lab has released this year. The company’s alignment report documents four separate incidents in which Claude models broke into real third-party systems […]
P0
2026-09-10 09:10 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-10 09:30 UTC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December. [...]
P40
2026-09-10 09:00 UTC
Other
ESET · indexed 2026-09-11 13:15 UTC
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
P0
2026-09-10 08:20 UTC
Government
CERT-EU Security Advisories · indexed 2026-09-10 08:30 UTC
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances. CERT-EU strongly recommends applying the available hotfixes as soon as possible, prio…
P5
2026-09-10 08:08 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-10 08:15 UTC
Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices. [...]
P0
2026-09-10 08:06 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-10 08:55 UTC
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-75650 (CVSS score of 10.0) is an Adobe Commerce and Magento improper neutralization of special elements in a […]
P35
2026-09-10 07:12 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-10 08:45 UTC
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who holds it can read every
P0
2026-09-10 07:09 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-10 07:15 UTC
The exploit provides full System privileges on Windows machines running the September 2026 patches. The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek.
P25
2026-09-10 07:04 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-10 08:45 UTC
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company said the incident dates back to January 2026 and involved an early version of Claude Opus 4.6 that breached "
P0
2026-09-10 07:00 UTC
Security Journalism
Dark Reading · Nate Nelson · indexed 2026-09-10 07:05 UTC
Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.
P0
2026-09-10 06:56 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-09-10 07:00 UTC
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks. [...]
P0
2026-09-10 06:33 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-10 06:35 UTC
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026. The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.
P5
2026-09-10 05:35 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-10 06:35 UTC
Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development. Proofpoint published a detailed analysis of a Chrome-and-Windows exploit kit it tracks as BlueMoon that four nation-state actors adopted within roughly two weeks of the first observed use. Google’s Threat Intelligence Group, Microsoft’s MSTIC, and Volexity all contributed to […]
P25
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75862.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75863.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75771.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81973.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81976.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81981.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81988.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81977.
P5
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-80161.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81991.
P5
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81978.
P5
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81984.
P5
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81975.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-79910.
P5
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-79909.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81986.
P20
2026-09-10 05:00 UTC
Other
Zero Day Initiative · indexed 2026-09-10 13:30 UTC
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81989.
P20
