Weekly Threat Intel: Edge CVEs, MCP Agent Abuse, Stealer Cashouts
Edge CVEs under active exploitation, AI-agent abuse patterns, and infostealer cash-out trails — the week’s threat picture and what defenders should do about each.
Weekly threat briefings, zero-day and CVE analysis, KEV updates.
Weekly Threat Intel: Agentic AI Abuse and Edge CVEs
Agentic-AI abuse, the fall 2026 Edge CVE wave and infostealer tradecraft — this week’s defensive priorities in one briefing.
Weekly Threat Intel: Agentic AI, Stealer Logs, Edge CVEs
Stealer-log markets, edge-device exploitation and agentic-AI abuse: what defenders must patch, monitor and drill this week.
Weekly Threat Intel: Agentic AI Abuse and September 2026 CVEs
Agentic-AI abuse, the September 2026 CVE wave and ransomware tradecraft — this week’s defensive checklist.
Cordyceps CI/CD Flaws & Cisco Zero-Days: June Brief
June 2026 threat briefing: Cordyceps CI/CD flaws exposed 300+ GitHub repos, Cisco SD-WAN zero-days exploited in the wild, and AI-powered agentic adversaries are compressing the attack lifecycle from weeks to hours.
5 Critical Zero-Days Breaking Right Now (June 2026)
A real-time analysis of five critical cybersecurity threats active in June 2026: the RoguePlanet Windows Defender zero-day, actively exploited Cisco SD-WAN vManage, Oracle PeopleSoft RCE data theft, Exchange Server XSS, and the WhatsApp VBScript-to-RMM campaign.
GreatXML to RoguePlanet: The Zero-Days Redefining Endpoint Security in 2026
GreatXML weaponizes Defender’s offline scan via crafted XML for SYSTEM execution; RoguePlanet hits a real-time protection logic flaw. Plus five more June 2026 threats and the week’s patch priorities.
AI Agents Uncover Zero-Days: June 2026 Threat Landscape
June 2026 threat briefing: an AI agent found 21 FFmpeg zero-days, the Miasma worm hit 73 GitHub repos, Cisco SD-WAN sat exploited with no patch, and CISA added three KEV entries on tight deadlines.
VS Code Token Theft & Cisco’s 7th Zero-Day
This week: VS Code one-click GitHub token theft, Cisco’s 7th SD-WAN zero-day (CVE-2026-20245), Kirki and Burst Statistics WordPress plugins under active attack, and 100 AI agents tested for security.
CISA KEV June 2026: Android RCE & Palo Alto VPN Bypass
CISA added five vulnerabilities to its Known Exploited Vulnerabilities Catalog in June 2026 — Android Framework RCE, Linux kernel privesc, Oracle WebLogic access, PAN-OS VPN bypass, and trojanized Daemon Tools builds. Here is what defenders need to know and do.
The State of Cybersecurity in 2026: Five Trends Reshaping Digital Defense
From AI-powered attacks to post-quantum cryptography, explore the five cybersecurity trends defining 2026 and what defenders must do now.
Pwn2Own Berlin 2026: 47 Zero-Days & AI Assistants Exploited
Pwn2Own Berlin 2026 awarded $1.3M for 47 zero-days in three days - and AI coding assistants OpenAI Codex and Anthropic Claude Code were exploited on stage for the first time. DEVCORE took Master of Pwn with $505K. Full results, the AI-target analysis, and what AppSec teams must do now.