'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
vulnerability
Silent Hill Townfall Splits Fans: 68% Steam Score [2026]
Silent Hill: Townfall launched today, September 24, 2026, on PlayStation 5, Steam, and the Epic Games Store, and the review cycle that closed out this week tells a strikingly consistent story: critics like the mood, the puzzles, and the willingness to make players feel weak again, but almost nobody is calling the combat good. Steam’s…
Unpatched OnePlus Root Flaws: 0 CVE, 0 Fix Yet [2026]
A malicious app that asks for zero special permissions can still take full root control of a stock OnePlus 15 running the latest OxygenOS build. That is the finding published by The Hacker News on September 24, 2026, and it lands as one of the more alarming Android OEM disclosures of the year because there…
Reality Defender vs Hive vs Sensity: $33M vs $3.2M Gap [2026]
A finance employee at a multinational firm wired $25 million in early 2024 after a video call with what looked and sounded like the company’s CFO. It wasn’t. That case, still cited as the reference point for deepfake-driven fraud, is why three companies — Reality Defender, Hive AI, and Sensity — now sell detection software…
OpenPLC Runtime v3
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue state-changing requests as an operator which would allow the attacker to control the programmable logic controller and the physical processes it drives. The following versions of OpenPLC Runtime v3 are affected: OpenPLC 3 (CVE-2026-88020) CVSS Vendor Equipment…
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. …
Siemens Mendix Runtime (Update A)
View CSAF Summary This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute. The following versions of Siemens Mendix Runtime are affected: Siemens Mendix Runtime vers:all/* (CVE-2026-7891) CVSS Vendor Equipment Vulnerabilities v3 9.1 Siemens Siemens Mendix Runtime Insecure Inherited Permissions Background Critical Infrastructure Sectors: Critical…
Botslab G980H Dashcams
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation. The following versions of Botslab G980H Dashcams are affected: G980H dash cam series 30010_QHG980HN5294SysFW+ (CVE-2026-84399, CVE-2026-82566, CVE-2026-85496, CVE-2026-77967, CVE-2026-88761, CVE-2026-82716, CVE-2026-84403, CVE-2026-75558, CVE-2026-81630,…
Eufy Omni C20, Omni X10 Pro
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. The following versions of Eufy Omni C20, Omni X10 Pro are affected: Omni C20 <1.6.4 (CVE-2026-93289, CVE-2026-93290, CVE-2026-93291) Omni X10 Pro <1.6.4 (CVE-2026-93289) CVSS Vendor Equipment Vulnerabilities v3 9.4 Eufy Eufy Omni C20, Omni…
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework. The post AI-powered fuzzing with the GitHub Security Lab Taskflow Agent appeared first on The GitHub Blog.