Cisco CVE-2026-20133 Targeted in Active Attacks
The three newly added bugs are CVE-2026-20122, CVE-2026-20128, and CVE-2026-20133, the last of which had not been identified in active attacks before.
All topics
Vulnerability
45 Posts
Myths and Mythos: An AI Vulnerability Research FAQ
It’s still very early days for all of this, and relatively little is known about Claude Mythos’s real capabilities, so we wanted to dig into what actually is known and what it all means.
The Era of AI-Led Vulnerability Research With Tom Ptacek
Dennis sits down with Tom Ptacek of Fly.io, a veteran security researcher, founder, and observer of the vulnerability landscape, to talk about the recent wave of AI-assisted vulnerability discovery and exploit development, specifically from the use of frontier models such as Claude Mythos. Tom has strong opinions on what’s coming and how human researchers and […]
Fix the Dang Software: Claude Mythos and Vulnerability Research
Claude Mythos Preview is making huge waves in the world of vulnerability discovery and exploit development. And it’s not even publicly available! We asked hacker and Luta Security CEO Katie Moussouris and AI and machine learning security pioneer Gary McGraw what AI-enabled bug hunting means for researchers, defenders, and enterprise security teams.
Fortinet CVE-2026-35616 Actively Exploited
The company published an advisory on Saturday and urged all customers who are running affected versions of the software to install the hotfix as quickly as possible. The bug affects versions 7.4.5 and 7.4.6 of FortiClient EMS.
Command Injection Bug in OpenAI Codex Exposed GitHub OAuth Tokens
The bug is a command injection issue and lies in the way that Codex processed GitHub branch names during the execution of tasks.