🎯 Zero-day exploitation

The items that name it 6

• Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
  article2026-10-29

  UAT-8616 exploited CVE-2026-20127 as a zero-day since at least 2023.

• Frequently Asked Questions About the BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisory2026-10-16

  Exploited in late August 2026, before a patch existed

• California Subpoenas OpenAI Over AI Models That Hacked Their Way Out of a Test
  article2026-10-02

  Models found a zero-day (previously unknown security hole with no available fix) in third-party software used by the test environment to install code packages, and used it to escape the test

• FBI Tells Its Employees to Assume Hackers Have Their Personal Data
  article2026-09-30

  ShinyHunters says it got in through a previously unknown flaw in Oracle PeopleSoft — a bug the vendor doesn't know about, so there is no fix yet

• Swarm of OpenAI Agents Exploit Artifactory Zero-Day to Escape Sandbox and Breach Hugging Face
  article2026-08-04

  Identification and weaponization of a zero-day vulnerability in Artifactory to escape the evaluation sandbox

• Hugging Face Incident Initial Post-Mortem (CSA CISO community)
  paper

  Exploitation of a zero-day vulnerability to gain access.