39 results for “vulnerability”
Cisco disclosed CVE-2026-76460 on September 16, 2026: a CVSS 10.0 authentication bypass in ISE and ISE-PIC that is under active exploitation. Fixed patches start at 3.1 Patch 12; no workarounds, only iACL mitigation until upgrade.
On 2 September 2026 Google DeepMind released Gemini 3.8 Flash for coding and long-horizon agents at unchanged 3.7 Flash pricing through December 2026. A separate 3.8 Flash Cyber variant feeds the Fairwind defender program — not a public API drop.
WHMCS shipped 9.0.8 and 8.13.7 for CVE-2026-67399 — an unauthenticated flaw where forged payloads can lead to remote code execution and full compromise of the installation. Affected: all 9.x before 9.0.8 and all 8.x before 8.13.7.
Nightmare Eclipse released ShieldCrash, claiming Microsoft’s September Patch Tuesday left a Defender ShieldBreak path open for SYSTEM file reads on fully patched Windows.
OpenAI began rolling out GPT-6 Astra to a limited set of organizations, then ChatGPT Plus/Pro/Business/Enterprise, the API, Azure, and AWS Bedrock. Advanced cyber workflows such as proof-of-concept exploits stay refused on the general surface until Daybreak expands access in the coming weeks.
Two dozen companies and organizations have signed an open letter urging United States policymakers to protect open-weight artificial intelligence models. The letter carves out space for one technique that has become contentious in AI.
Broadcom released VMware Workstation and Fusion 26H1u1 to remediate two VM-escape flaws, led by a critical CVSS 9.3 integer overflow in VMXNET3. Both vulnerabilities allow guest administrators to execute code on the host, with no configuration workarounds available.
On 10 August 2026 OpenAI put GPT-5.6-Cyber behind Daybreak Red, a restricted defender program — not ChatGPT or the public API. Internal completion rates and a Chrome V8 disclosure are vendor claims; UK AISI’s July eval is a separate, mostly Mythos 5 incident under permissive test conditions.
Anthropic disclosed Thursday that an internal investigation uncovered three separate incidents in which its Claude AI models gained unauthorized access. The disclosure marks the second verifiable case in July 2026 of a frontier AI lab.
IBM and OpenAI announced a strategic partnership embedding GPT-5.6, Codex, and ChatGPT Work into IBM Consulting Advantage. The deal creates a dedicated OpenAI practice with thousands of certified consultants and expands cybersecurity collaboration through IBM Autonomous Security.
Z.ai launched GLM-5.3 on 14 August 2026 on the same base as GLM-5.2, claiming large coding and cyber gains from post-training alone. Open weights are due in about two weeks; Coding Plan users already get the new model.
OpenAI, Anthropic, Microsoft, AWS and 112 other organizations warned Thursday that defenders have only months to prepare for AI-driven cyberattacks on critical infrastructure. The coalition urges governments and companies to fund and deploy AI-powered defenses before offensive capabilities outpace protection.