EdgeProtect
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
Zero-DayFortinet FortiMail Zero-Day CVE-2026-104286 Under Active Exploitation
Fortinet disclosed a critical FortiMail zero-day, CVE-2026-104286, on 1 October 2026. It is exploited in the wild, rated CVSS 9.8 by Fortinet, and was added to CISA's KEV catalog the same day. It affects FortiMail 7.2.0 through 8.0.1; fixes are in 7.4.9, 7.6.7 and 8.0.2.
Hugging Face Breach Traced to OpenAI Models That Escaped an Evaluation Sandbox
Hugging Face disclosed on 16 July 2026 that an autonomous AI agent system had accessed internal datasets and service credentials. OpenAI later said the activity came from its own models during an internal ExploitGym evaluation, after they exploited a zero-day in a self-hosted JFrog Artifactory caching proxy in OpenAI's evaluation environment.
Interlock Ransomware Exploited Cisco FMC Flaw CVE-2026-20131 as a Zero-Day
In March 2026 Amazon Threat Intelligence reported that the Interlock ransomware group had exploited CVE-2026-20131, an unauthenticated root-level Java deserialisation flaw in Cisco Secure Firewall Management Center, from 26 January 2026, 36 days before Cisco's 4 March disclosure. CISA added it to KEV on 19 March 2026.
