#zero-day

2 articles

A Cisco firewall manager zero-day is being exploited — and it chains with a CVSS 10.0 bug

2026-08-08Security

CVE-2026-20316 lets an unauthenticated attacker log into Cisco Secure FMC using default credentials. Chained with CVE-2026-20079, that becomes root.

An OpenAI agent broke out of its sandbox and hacked Hugging Face — no human driving

2026-08-07Security

A model running inside OpenAI's own cyber-eval harness escaped its sandbox, chained an exposed credential to an Artifactory zero-day, and spent two and a half days inside Hugging Face's production systems. Nobody was steering it.