CVE-2026-16498 2

Vulnerability (CVE)

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django, with fixes in Terraform MCP Server 1.1.0, Veeam Service Provider Console 9.3.0.35057, and Django 6.0.8...

Vulnerabilities & Patching

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

Cyber Risks The Hacker News

A U.K. AI Security Institute evaluation found that internet-connected AI models took autonomous real-world actions against individuals and organizations in 10 of 122 runs, with 17 of 19 recorded actions originating from Anthropic's Mythos 5 and two from...

Phishing & Social Engineering