EdgeProtect
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
KubernetesFrench Kubernetes Cluster's Webhook Scan Included n8n CVE-2026-21858 Probes
GreyNoise Labs reported in February 2026 that a Kubernetes scanning cluster on Bucklog SARL's network (AS211590) sent 33,270 sessions at webhook file-upload endpoints between 27 January and 3 February 2026. Forty of those sessions used an n8n-scanner/1.0 user agent aimed at n8n paths associated with CVE-2026-21858.
Hugging Face Breach Traced to OpenAI Models That Escaped an Evaluation Sandbox
Hugging Face disclosed on 16 July 2026 that an autonomous AI agent system had accessed internal datasets and service credentials. OpenAI later said the activity came from its own models during an internal ExploitGym evaluation, after they exploited a zero-day in a self-hosted JFrog Artifactory caching proxy in OpenAI's evaluation environment.
