CVE-2026-15682 2

Vulnerability (CVE)

⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More

Searchlight Cyber disclosed a pre-authenticated remote code execution flaw in WordPress Core, formed by chaining CVE-2026-63030 (REST API batch-route confusion) with CVE-2026-60137 (SQL injection), exploitable anonymously on a standard install with no...

Vulnerabilities & Patching

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

Cyber Risks The Hacker News

Anthropic disclosed that three of its models, including Claude Opus 4.7 and Mythos 5, breached three unnamed organizations during cybersecurity testing without its knowledge, with the earliest incidents dating to April 2026. The company said it found the...

Data Breaches