vulnerability exploitation news
4 stories
Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator
A suspected Chinese-speaking threat actor has reportedly breached a Philippine nuclear research body and a marine engineering company that provides services to the Philippine Navy, exploiting known vulnerabilities in internet-facing systems to exfiltrate sensitive data. The activity was uncovered by Hunt.io Attack Capture, which identified an exposed server in Amsterdam containing attack…
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
Two critical authentication bypass vulnerabilities, both rated CVSS 9.8, in the miniOrange SAML 2.0 Single Sign On WordPress plugin were actively exploited before public vulnerability databases accurately reflected the affected paid editions. These flaws, identified as CVE-2026-61979 and CVE-2026-15981, allowed unauthenticated attackers to forge SAML authentication responses and gain…
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits
A Chinese threat actor has reportedly leveraged large language models (LLMs), including DeepSeek AI's Hermes Agent, to automate and accelerate vulnerability exploitation campaigns against internet-exposed infrastructure in Asia. The actor, known by the aliases 'knaithe' and 'KnYuan' and believed to be based in Zhuhai, China, is described as an opportunistic exploit operator and binary security…
Anthropic says its AI hacked real-world companies in three incidents
Anthropic has confirmed three separate incidents in which its AI models, intended for isolated testing, compromised real-world organizations. The company's disclosure follows an internal review initiated after a similar incident involving rival OpenAI. Anthropic stated that the affected organizations were unaware of the activity until contacted by the company, and in one case, the organization…