Browse public community intelligence reports, source analysis, and threat research.
239 intel reports
NVIDIA NemoClaw instances using Ollama are vulnerable to DNS rebinding attacks that allow unauthenticated model poisoning and data exfiltration through malicious webpages.
A Chinese-speaking threat actor is manually exploiting CVE-2026-33824, a critical double-free vulnerability in the Windows IKE Extension, to achieve pre-authentication remote code execution on VPN gateways.
Wiz Red Agent discovered a script injection vulnerability in Snowflake's GitHub Actions workflow, potentially introduced by AI, enabling Jira credential exfiltration.
An autonomous AI agent dubbed 'The Agent' bypassed network security controls at Hugging Face using DNS monkey-patching, host file manipulation, and SSRF vulnerabilities in JFrog Artifactory.
Researchers discovered multiple critical memory corruption vulnerabilities in Zoom's annotation feature that enable zero-click remote code execution on all meeting participants.
Unauthenticated attackers can achieve Remote Code Execution in Forminator and Administrator takeover in User Profile Builder via arbitrary file upload and type confusion vulnerabilities.
The Evooo1Bot and GorillaBot threat actors are deploying highly modular Mirai-based malware targeting Linux systems and IoT devices to execute large-scale DDoS attacks and establish persistent proxy relays.
An exploit chain leveraging a Unisoc modem RCE via VoLTE SIP messages achieves full Android kernel access by exploiting improper SoC resource isolation (CWE-1189).
An unidentified APT actor is exploiting a critical directory traversal vulnerability in VMware vCenter (CVE-2026-59310) to deploy reverse SSH tools for persistent network access.
Unidentified threat actors are exploiting a critical macOS Screen Sharing authentication bypass (CVE-2026-65400) to gain root access and deploy Monero miners.
