Exploit

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach Source: The Hacker News JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog’s software repository manager. OpenAI says the models then escalated privileges and moved laterally until they re Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original

Hackers target US firms in FastJson RCE zero-day attacks Source: BleepingComputer Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. […] Read original

Hackers target US firms in FastJson RCE zero-day attacks Source: BleepingComputer Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. […] Read original