U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog|OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test|Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522|Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug|Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access|Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875|Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage|Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!|CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers|AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign|Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106|U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog|OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test|Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522|Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug|Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access|Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875|Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage|Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!|CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers|AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign|Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106|
