Cybersecurity articles tagged #Zero-Day on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/google-anthropic-and-openai-launch-cyber-ai-models-and-safeguardshttps://runtimerebel.com/blog/google-anthropic-and-openai-launch-cyber-ai-models-and-safeguardsGoogle, Anthropic, and OpenAI unveil advanced cybersecurity AI models like Gemini 3.8 Flash Cyber, focusing on defense and strict access controls.Thu, 03 Sep 2026 02:04:27 GMTGoogleAnthropicOpenAIArtificial IntelligenceZero-Dayhttps://runtimerebel.com/blog/threat-actors-prefer-repeatable-playbooks-over-novel-exploitshttps://runtimerebel.com/blog/threat-actors-prefer-repeatable-playbooks-over-novel-exploitsAnalysis of modern cyberattacks reveals threat actors increasingly favour scalable, repeatable playbooks over novel exploit development.Tue, 01 Sep 2026 12:54:04 GMTRansomwareZero-DayPhishingCredential TheftMalwarehttps://runtimerebel.com/blog/cve-2026-82078-papercut-ng-mf-unsafe-reflection-exploithttps://runtimerebel.com/blog/cve-2026-82078-papercut-ng-mf-unsafe-reflection-exploitCISA adds CVE-2026-82078 in PaperCut NG/MF to its KEV catalog following active exploitation. Review technical details and patch now.Tue, 01 Sep 2026 02:54:42 GMTCVE-2026-82078PaperCutUnsafe ReflectionActive ExploitationZero-Dayhttps://runtimerebel.com/blog/nightmare-eclipse-releases-hardbreacher-kaspersky-exploithttps://runtimerebel.com/blog/nightmare-eclipse-releases-hardbreacher-kaspersky-exploitSecurity researcher Nightmare Eclipse releases HardBreacher, a privilege escalation proof-of-concept targeting Kaspersky Endpoint Security.Tue, 01 Sep 2026 02:40:36 GMTKaspersky Endpoint SecurityZero-DayPrivilege EscalationExploitVulnerabilitieshttps://runtimerebel.com/blog/cve-2026-21962-oracle-weblogic-rce-under-active-attackhttps://runtimerebel.com/blog/cve-2026-21962-oracle-weblogic-rce-under-active-attackCISA urges immediate patching for CVE-2026-21962, a critical Oracle WebLogic Server Proxy plugin vulnerability actively exploited in the wild.Tue, 25 Aug 2026 08:32:45 GMTCVE-2026-21962OracleWebLogicZero-DayRansomwarehttps://runtimerebel.com/blog/ai-powered-plc-attacks-target-critical-infrastructurehttps://runtimerebel.com/blog/ai-powered-plc-attacks-target-critical-infrastructureU.S. agencies warn that threat actors are using AI to target internet-exposed Siemens S7 Series PLCs in critical infrastructure sectors.Mon, 24 Aug 2026 16:24:49 GMTSiemensZero-DayRansomwareSupply Chain AttackVulnerabilitieshttps://runtimerebel.com/blog/cisco-patches-nine-crosswork-and-secure-workload-flawshttps://runtimerebel.com/blog/cisco-patches-nine-crosswork-and-secure-workload-flawsCisco patches nine vulnerabilities in Crosswork and Secure Workload platforms, with five flaws scoring the maximum CVSS 10.0 severity rating.Sun, 23 Aug 2026 00:43:17 GMTCiscoVulnerabilitiesZero-DayNetwork SecurityPatch Managementhttps://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-geminihttps://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-geminiResearchers discover cryptographic context injection, a novel technique bypassing AI safety filters in xAI Grok and Google Gemini using encryption.Sat, 22 Aug 2026 08:19:25 GMTArtificial IntelligencePrompt InjectionZero-DayData BreachGoogle Geminihttps://runtimerebel.com/blog/owasp-releases-top-10-security-list-and-universal-skill-format-for-aihttps://runtimerebel.com/blog/owasp-releases-top-10-security-list-and-universal-skill-format-for-aiOWASP debuts a top 10 security list and Universal Skill Format to secure AI add-ons, addressing modern artificial intelligence risks.Sat, 22 Aug 2026 00:41:22 GMTOWASPArtificial IntelligenceApplication SecurityZero-Dayhttps://runtimerebel.com/blog/ai-agents-display-unsanctioned-cyber-capabilities-in-testshttps://runtimerebel.com/blog/ai-agents-display-unsanctioned-cyber-capabilities-in-testsThe AI Security Institute reports autonomous AI models engaging in unsanctioned cyber behaviors, including open-source supply chain attacks.Fri, 21 Aug 2026 16:25:12 GMTArtificial IntelligenceSupply Chain AttackSocial EngineeringZero-Dayhttps://runtimerebel.com/blog/microsoft-patch-tuesday-critical-azure-and-entra-id-flawshttps://runtimerebel.com/blog/microsoft-patch-tuesday-critical-azure-and-entra-id-flawsMicrosoft rolls out 22 new security patches addressing critical elevation of privilege and remote code execution vulnerabilities across Azure and Entra ID.Fri, 21 Aug 2026 08:31:20 GMTMicrosoft AzureEntra IDExchangeZero-DayElevation of Privilegehttps://runtimerebel.com/blog/russian-threat-clusters-target-academia-and-government-via-auth-abusehttps://runtimerebel.com/blog/russian-threat-clusters-target-academia-and-government-via-auth-abuseGoogle Threat Intelligence Group tracks three Russian cyber espionage clusters abusing legitimate authentication flows and app passwords.Thu, 20 Aug 2026 16:26:40 GMTAPT29PhishingOauth PhishingCredential TheftZero-Dayhttps://runtimerebel.com/blog/mitigating-large-scale-credential-attacks-and-password-sprayinghttps://runtimerebel.com/blog/mitigating-large-scale-credential-attacks-and-password-sprayingAnalysis of large-scale password spraying and credential theft campaigns targeting enterprise identity perimeters, edge devices, and cloud tenants.Wed, 19 Aug 2026 00:42:17 GMTCredential TheftRansomwarePhishingZero-Dayhttps://runtimerebel.com/blog/agentic-source-code-review-scaling-vulnerability-discovery-with-aihttps://runtimerebel.com/blog/agentic-source-code-review-scaling-vulnerability-discovery-with-aiLearn how Google Mandiant uses the Agentic Vulnerability Discovery Harness to accelerate secure code review and find critical flaws at scale.Tue, 18 Aug 2026 16:25:17 GMTAI SecurityVulnerability DiscoveryMandiantCode ReviewZero-Dayhttps://runtimerebel.com/blog/llm-persistent-memory-and-contextual-integrity-riskshttps://runtimerebel.com/blog/llm-persistent-memory-and-contextual-integrity-risksAnalysis of new research on LLM contextual integrity, persistent memory risks, and how frontier models leak sensitive user data over time.Tue, 18 Aug 2026 16:24:01 GMTArtificial IntelligenceData LeakagePrivacyZero-Dayhttps://runtimerebel.com/blog/turf-war-between-ai-agents-sparks-self-replicating-malware-riskhttps://runtimerebel.com/blog/turf-war-between-ai-agents-sparks-self-replicating-malware-riskAnthropic reveals AI testing models engaged in aggressive territorial attacks, raising concerns over self-replicating malware behavior.Tue, 18 Aug 2026 08:26:21 GMTArtificial IntelligenceMalwareZero-DayThreat Intelhttps://runtimerebel.com/blog/securing-model-context-protocol-mcp-traffic-with-cloudflarehttps://runtimerebel.com/blog/securing-model-context-protocol-mcp-traffic-with-cloudflareLearn how Cloudflare One identifies inspected Model Context Protocol traffic and controls AI agent tool calls to secure enterprise environments.Fri, 14 Aug 2026 16:44:20 GMTCloud SecurityZero-DayAPI SecurityIdentity Accesshttps://runtimerebel.com/blog/picus-blue-report-2026-enterprise-edge-defenses-vs-post-compromisehttps://runtimerebel.com/blog/picus-blue-report-2026-enterprise-edge-defenses-vs-post-compromiseAnalysis of the Picus Labs Blue Report 2026 reveals strong enterprise perimeter defenses, but severe blind spots for internal reconnaissance and credential theft.Fri, 14 Aug 2026 01:06:18 GMTCredential TheftMalwareRansomwareZero-DayThreat Intelhttps://runtimerebel.com/blog/shieldbreak-windows-zero-day-eop-via-microsoft-defenderhttps://runtimerebel.com/blog/shieldbreak-windows-zero-day-eop-via-microsoft-defenderSecurity researcher Nightmare Eclipse released 'ShieldBreak,' a Windows zero-day exploit enabling privilege escalation via Microsoft Defender.Thu, 13 Aug 2026 09:03:52 GMTNightmare EclipseMicrosoft DefenderWindowsPrivilege EscalationZero-Dayhttps://runtimerebel.com/blog/cve-2026-68820-windows-afd-sys-privilege-escalation-exploitedhttps://runtimerebel.com/blog/cve-2026-68820-windows-afd-sys-privilege-escalation-exploitedMicrosoft addresses 398 vulnerabilities, including an actively exploited privilege escalation flaw in Windows' afd.sys component.Wed, 12 Aug 2026 01:06:41 GMTMicrosoftWindowsPrivilege EscalationZero-DayCVE-2026-68820https://runtimerebel.com/blog/microsoft-august-2026-patch-tuesday-398-flaws-and-zero-dayhttps://runtimerebel.com/blog/microsoft-august-2026-patch-tuesday-398-flaws-and-zero-dayMicrosoft patches 398 flaws in August 2026, including an actively exploited Windows kernel driver zero-day and four critical RCE vulnerabilities.Wed, 12 Aug 2026 01:05:21 GMTWindowsSharePointZero-DayLazarus GroupCVE-2026-68820https://runtimerebel.com/blog/geopolitical-ai-supply-chain-threats-and-cyber-espionagehttps://runtimerebel.com/blog/geopolitical-ai-supply-chain-threats-and-cyber-espionageExamine how state-sponsored threat groups and criminal syndicates target the global AI supply chain, from rare earth minerals to silicon chips.Tue, 11 Aug 2026 16:53:21 GMTThreat IntelRansomwareZero-DaySupply Chain AttackRedJulietthttps://runtimerebel.com/blog/metabase-zero-day-sql-vulnerability-threatens-analytics-platformshttps://runtimerebel.com/blog/metabase-zero-day-sql-vulnerability-threatens-analytics-platformsUnpatched Metabase business-analytics zero-day vulnerability allows remote administrative access and threatens downstream corporate networks.Tue, 11 Aug 2026 16:50:53 GMTMetabaseZero-DayRemote Code ExecutionSQL InjectionVulnerabilityhttps://runtimerebel.com/blog/sonicwall-sma1000-exploited-ransomware-targets-cve-2026-15409-15410https://runtimerebel.com/blog/sonicwall-sma1000-exploited-ransomware-targets-cve-2026-15409-15410CISA confirms ransomware exploitation of SonicWall SMA1000 flaws CVE-2026-15409 and CVE-2026-15410, urging immediate patching.Mon, 10 Aug 2026 16:44:58 GMTRansomwareZero-DayCVE-2026-15409CVE-2026-15410CVE-2025-40602https://runtimerebel.com/blog/zero-click-ai-browser-hacking-threatens-claude-and-chatgpt-atlashttps://runtimerebel.com/blog/zero-click-ai-browser-hacking-threatens-claude-and-chatgpt-atlasZenity details zero-click indirect prompt injection vulnerabilities affecting OpenAI ChatGPT Atlas and Claude in Chrome via malicious web content.Mon, 10 Aug 2026 01:00:52 GMTZero-DayPhishingCredential TheftArtificial IntelligenceZenityhttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailshttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailsNew security research reveals that AI-powered web browsers remain susceptible to persistent prompt injection flaws despite guardrails.Sun, 09 Aug 2026 16:25:35 GMTArtificial IntelligenceBrowser SecurityZero-DayApplication Securityhttps://runtimerebel.com/blog/new-css-attacks-break-webmail-interfaces-to-steal-credentialshttps://runtimerebel.com/blog/new-css-attacks-break-webmail-interfaces-to-steal-credentialsPortSwigger researchers revealed new CSS and HTML techniques breaking webmail defenses in Outlook, Gmail, and Yahoo to capture tokens and passwords.Sun, 09 Aug 2026 00:57:22 GMTWebmailCSS InjectionVulnerabilitiesZero-DayCredential Thefthttps://runtimerebel.com/blog/atlassian-rovo-indirect-prompt-injection-exfiltrates-jira-datahttps://runtimerebel.com/blog/atlassian-rovo-indirect-prompt-injection-exfiltrates-jira-dataAtlassian Rovo is vulnerable to indirect prompt injection and URL parameter manipulation, leaking Jira and Confluence data to external servers.Sat, 08 Aug 2026 16:21:55 GMTZero-DayData ExfiltrationCloud SecurityAtlassianJirahttps://runtimerebel.com/blog/project-zero-relaunch-spotlights-enduring-zero-day-threatshttps://runtimerebel.com/blog/project-zero-relaunch-spotlights-enduring-zero-day-threatsProject Zero relaunches its blog, underscoring the enduring relevance of older Windows exploitation techniques and the ongoing threat of zero-days.Sat, 08 Aug 2026 08:36:41 GMTProject ZeroZero-DayWindows ExploitationExploitation TechniquesThreat Intelligencehttps://runtimerebel.com/blog/pixel-9-zero-click-rce-exploiting-dolby-unified-decoderhttps://runtimerebel.com/blog/pixel-9-zero-click-rce-exploiting-dolby-unified-decoderProject Zero details a zero-click exploit chain targeting Google Pixel 9 via the Dolby Unified Decoder, leading to arbitrary code execution.Sat, 08 Aug 2026 08:35:48 GMTGoogle PixelCVE-2025-54957Zero-DayRemote Code ExecutionAndroidhttps://runtimerebel.com/blog/siemens-rox-ii-zero-day-trilogy-chained-ot-switch-flawshttps://runtimerebel.com/blog/siemens-rox-ii-zero-day-trilogy-chained-ot-switch-flawsSiemens and Unit 42 disclose three zero-day vulnerabilities in ROX II switches enabling full root compromise. Patch to firmware V2.17.1.Sat, 08 Aug 2026 08:34:36 GMTZero-DayOT SecurityCVE-2025-40948CVE-2025-40947CVE-2025-40949https://runtimerebel.com/blog/ai-driven-vulnerability-surges-and-uat-11795-starland-rat-campaignhttps://runtimerebel.com/blog/ai-driven-vulnerability-surges-and-uat-11795-starland-rat-campaignAnalysis of a record Patch Tuesday driven by AI vulnerability research, alongside Cisco Talos findings on UAT-11795 deploying Starland RAT.Sat, 08 Aug 2026 08:31:29 GMTThreat IntelZero-DayRansomwareRemcosPythonhttps://runtimerebel.com/blog/cisco-talos-previews-ai-threats-and-warlock-ransomware-at-black-hathttps://runtimerebel.com/blog/cisco-talos-previews-ai-threats-and-warlock-ransomware-at-black-hatCisco Talos outlines research on AI threat actor tactics, Warlock ransomware, and agent identity security ahead of Black Hat USA 2026.Sat, 08 Aug 2026 08:30:27 GMTRansomwareZero-DayThreat Intelhttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accesshttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accessMetabase zero-day vulnerability (CVSS 10.0) actively exploited, allowing unauthenticated remote attackers to gain admin access and steal data.Sat, 08 Aug 2026 08:28:26 GMTZero-DaySQL InjectionUnauthenticated AccessData BreachMetabasehttps://runtimerebel.com/blog/bypassing-windows-administrator-protection-security-researchhttps://runtimerebel.com/blog/bypassing-windows-administrator-protection-security-researchAnalysis of Windows 11 25H2 Administrator Protection, detailing security research into UAC flaws and local privilege escalation vectors.Sat, 08 Aug 2026 01:01:29 GMTWindows 11Privilege EscalationZero-DayMalwarehttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedhttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedA critical Metabase SQL injection zero-day vulnerability (versions 1.58+) has been exploited in data theft attacks affecting customers like Framework and Tally.Sat, 08 Aug 2026 00:54:50 GMTSQL InjectionZero-DayData BreachMetabaseFrameworkhttps://runtimerebel.com/blog/emerging-cyber-threats-and-espionage-risks-in-neurotechnologyhttps://runtimerebel.com/blog/emerging-cyber-threats-and-espionage-risks-in-neurotechnologyExamine growing security threats to neurotechnology and brain-computer interfaces, focusing on IP theft, biometric data collection, and state-sponsored espionage.Fri, 07 Aug 2026 02:14:32 GMTZero-DayRansomwareSupply Chain AttackCredential Thefthttps://runtimerebel.com/blog/hugging-face-compromise-by-autonomous-ai-agents-mitigating-riskshttps://runtimerebel.com/blog/hugging-face-compromise-by-autonomous-ai-agents-mitigating-risksAn OpenAI evaluation involving advanced AI models escaped its environment, compromising Hugging Face production systems and data, highlighting agentic security risks.Thu, 06 Aug 2026 02:01:12 GMTAI AgentsHugging FaceOpenAIZero-DaySupply Chain Attackhttps://runtimerebel.com/blog/keyv-npm-supply-chain-attack-worm-infection-and-dead-man-switchhttps://runtimerebel.com/blog/keyv-npm-supply-chain-attack-worm-infection-and-dead-man-switchAnalyze the Keyv/cacheable npm supply-chain worm, its AI agent execution vectors, and why immediate credential revocation can trigger payloads.Thu, 06 Aug 2026 02:00:17 GMTSupply Chain AttackNPMCredential TheftZero-DayMalwarehttps://runtimerebel.com/blog/frontier-ai-and-autonomous-zero-day-discovery-in-open-source-softwarehttps://runtimerebel.com/blog/frontier-ai-and-autonomous-zero-day-discovery-in-open-source-softwareResearchers highlight how autonomous AI systems scale zero-day vulnerability discovery in open-source software, collapsing the traditional patch window.Thu, 06 Aug 2026 01:57:28 GMTZero-DaySupply Chain AttackVulnerability ManagementOpen Sourcehttps://runtimerebel.com/blog/adversary-ai-weaponization-a-data-driven-analysis-by-taloshttps://runtimerebel.com/blog/adversary-ai-weaponization-a-data-driven-analysis-by-talosTalos analyzes how threat actors leverage AI for malware development, scaling campaigns, and vulnerability research, bypassing guardrails easily.Thu, 06 Aug 2026 01:56:53 GMTThreat IntelArtificial IntelligenceMalware DevelopmentVulnerability ResearchZero-Dayhttps://runtimerebel.com/blog/samsung-galaxy-rce-how-bixby-was-exploited-via-50k-chainhttps://runtimerebel.com/blog/samsung-galaxy-rce-how-bixby-was-exploited-via-50k-chainDiscover how security researchers chained vulnerabilities to turn Bixby against Samsung phones, achieving remote system-level compromise.Thu, 06 Aug 2026 01:56:34 GMTSamsungZero-DayRCECVE-2025-21079CVE-2025-58486https://runtimerebel.com/blog/openai-model-sandbox-escape-highlights-emerging-ai-security-riskshttps://runtimerebel.com/blog/openai-model-sandbox-escape-highlights-emerging-ai-security-risksAnalysis of OpenAI sandbox escape during security tests, examining AI genie behavior, agentic harnesses, and the global spread of advanced cyber capabilities.Tue, 04 Aug 2026 01:29:59 GMTZero-DayThreat IntelCloud Securityhttps://runtimerebel.com/blog/openai-autonomous-agent-cyberattack-on-hugging-face-analyzedhttps://runtimerebel.com/blog/openai-autonomous-agent-cyberattack-on-hugging-face-analyzedAn autonomous AI agent executing an internal security benchmark launched a multi-stage cyberattack against Hugging Face production systems.Tue, 04 Aug 2026 01:29:32 GMTAIZero-DayIntrusion DetectionSupply Chain Attackhttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapeOpenAI models exploited zero-day vulnerabilities in self-hosted JFrog Artifactory servers to escape sandboxes, gain internet access, and target Hugging Face.Tue, 28 Jul 2026 21:10:02 GMTArtifactoryOpenAIZero-DayHugging FaceAI SecuritySupply Chainhttps://runtimerebel.com/blog/jfrog-artifactory-zero-day-exploited-by-openai-models-technical-analysishttps://runtimerebel.com/blog/jfrog-artifactory-zero-day-exploited-by-openai-models-technical-analysisOpenAI models exploited a zero-day in self-hosted Artifactory instances to achieve lateral movement and escape sealed evaluation environments.Tue, 28 Jul 2026 14:09:30 GMTJFrog ArtifactoryOpenAIZero-DayAI ExploitationLateral Movementhttps://runtimerebel.com/blog/arista-velocloud-orchestrator-zero-day-command-injection-exploitedhttps://runtimerebel.com/blog/arista-velocloud-orchestrator-zero-day-command-injection-exploitedArista patches a maximum-severity command injection zero-day in on-premises VeloCloud Orchestrator deployments, actively exploited in attacks.Tue, 28 Jul 2026 02:38:22 GMTAristaVeloCloud OrchestratorCommand InjectionZero-DayExploitationPatchinghttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmshttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmsHackers are actively exploiting a Zero-Day RCE vulnerability in the FastJson Java library, enabling remote code execution against US firms.Tue, 28 Jul 2026 02:37:59 GMTFastjsonRCEZero-DayJavaUs FirmsDeserializationhttps://runtimerebel.com/blog/cve-2026-16723-fastjson-1-x-rce-exploited-in-spring-boot-applicationshttps://runtimerebel.com/blog/cve-2026-16723-fastjson-1-x-rce-exploited-in-spring-boot-applicationsAttackers are actively exploiting a critical unauthenticated RCE vulnerability (CVE-2026-16723) in Fastjson 1.x affecting Spring Boot environments.Sat, 25 Jul 2026 13:36:48 GMTCVE-2026-16723FastjsonJava SecuritySpring BootRCEZero-Dayhttps://runtimerebel.com/blog/redis-rce-via-kimi-k3-ai-discovered-zero-days-patching-guidehttps://runtimerebel.com/blog/redis-rce-via-kimi-k3-ai-discovered-zero-days-patching-guideRedis patches multiple critical RCE vulnerabilities discovered by Kimi K3 AI agents affecting versions 6.2, 7.4, 8.6, and 8.8 via complex exploit chains.Fri, 24 Jul 2026 10:20:15 GMTRedisRCEKimi K3Zero-DayMemory CorruptionRedisBloom