{"title":"Websites and CMS advisories","description":"WordPress, Drupal, e-commerce platforms, plugins and web servers: exploited flaws and how to check your sites.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/vibe-coded-apis-ex-hacker-says-they-are-riddled-with-flaws/","title":"Vibe-coded APIs: ex-hacker says they are riddled with flaws","url":"https://vulnpocalypse.dev/advisories/vibe-coded-apis-ex-hacker-says-they-are-riddled-with-flaws/","date":"2026-11-12","summary":"Bank Info Security reports an ex-hacker says vibe-coded APIs are riddled with flaws; details unconfirmed, so review AI-generated API code.","tags":["ai-tools","ai-tools","web"]},{"id":"https://vulnpocalypse.dev/advisories/ndiligence-attack-the-glass-client-side-supply-chain-flaw-study/","title":"nDiligence Attack the Glass: client-side supply-chain flaw study","url":"https://vulnpocalypse.dev/advisories/ndiligence-attack-the-glass-client-side-supply-chain-flaw-study/","date":"2026-11-12","summary":"nDiligence published Attack the Glass research on runtime client-side rendering supply-chain risk; review third-party code your apps load.","tags":["supply-chain","web"]},{"id":"https://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/","title":"Muji operator reportedly apologizes for data breach, DataBreaches.net says","url":"https://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/","date":"2026-11-12","summary":"DataBreaches.net reports that the Muji operator apologized for a data breach; details are not confirmed, so watch official notices from the company.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/econotimes-reports-cyberattack-defaced-ukrinform-site-and-x-profile/","title":"EconoTimes reports cyberattack defaced Ukrinform site and X profile","url":"https://vulnpocalypse.dev/advisories/econotimes-reports-cyberattack-defaced-ukrinform-site-and-x-profile/","date":"2026-11-12","summary":"EconoTimes reports Ukrinform's website and X profile were altered Wednesday; treat its channels with caution until it confirms restoration.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/cherokee-county-sheriff-says-man-arrested-on-child-exploitation-charges/","title":"Cherokee County sheriff says man arrested on child exploitation charges","url":"https://vulnpocalypse.dev/advisories/cherokee-county-sheriff-says-man-arrested-on-child-exploitation-charges/","date":"2026-11-12","summary":"Local 3 News reports the Cherokee County Sheriff's Office says a man was arrested on child exploitation charges; contact CCSO with information.","tags":["ecosystem","web"]},{"id":"https://vulnpocalypse.dev/advisories/castlerat-stealc-gootloader-bleepingcomputer-reports-europol-takedown/","title":"CastleRAT, StealC, Gootloader: BleepingComputer reports Europol takedown","url":"https://vulnpocalypse.dev/advisories/castlerat-stealc-gootloader-bleepingcomputer-reports-europol-takedown/","date":"2026-11-12","summary":"BleepingComputer reports Europol seized servers tied to CastleRAT, StealC and Gootloader; check if your credentials were exposed.","tags":["breach","endpoint","web"]},{"id":"https://vulnpocalypse.dev/advisories/apify-discloses-breach-rotates-api-tokens-and-urges-2fa-resets/","title":"Apify discloses breach, rotates API tokens and urges 2FA resets","url":"https://vulnpocalypse.dev/advisories/apify-discloses-breach-rotates-api-tokens-and-urges-2fa-resets/","date":"2026-11-12","summary":"BleepingComputer reports Apify says an unauthorized party accessed internal systems; affected users are told to reset 2FA in Apify Console.","tags":["breach","web","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/","title":"ChatGPT shared chat link could run attacker code in the victim's session and read private chats (fixed, no","url":"https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/","date":"2026-11-12","summary":"A public ChatGPT share link could run attacker JavaScript as chatgpt.com and read private chats. OpenAI fixed it on 26 Oct; MathLive users should update.","tags":["ai-tools","ai-tools","web","npm"]},{"id":"https://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/","title":"Denmark CPR breach: 8.8 million names, addresses and CPR numbers pulled through one company's login","url":"https://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/","date":"2026-11-12","summary":"Attackers used one firm's CPR access to pull names, addresses and CPR numbers of 8.8 million people in Sep 2026. A CPR number no longer proves identity.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/polands-digital-ministry-says-it-stopped-a-cyberattack-on-epuap/","title":"Poland's Digital Ministry says it stopped a cyberattack on ePUAP","url":"https://vulnpocalypse.dev/advisories/polands-digital-ministry-says-it-stopped-a-cyberattack-on-epuap/","date":"2026-11-11","summary":"The Record reports Poland took ePUAP offline as a precaution after a cyberattack the ministry says was stopped; check gov.pl for service status.","tags":["ecosystem","web"]},{"id":"https://vulnpocalypse.dev/advisories/parks-victoria-says-it-knows-of-bookeasy-breach-suspicious-whatsapp-messages/","title":"Parks Victoria says it knows of Bookeasy breach, suspicious WhatsApp messages","url":"https://vulnpocalypse.dev/advisories/parks-victoria-says-it-knows-of-bookeasy-breach-suspicious-whatsapp-messages/","date":"2026-11-11","summary":"Parks Victoria says it is aware of a Bookeasy data breach and reports of suspicious WhatsApp messages; do not click links or pay.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/microsoft-reports-threat-actors-using-gsocket-for-persistent-linux-c2/","title":"Microsoft reports threat actors using GSocket for persistent Linux C2","url":"https://vulnpocalypse.dev/advisories/microsoft-reports-threat-actors-using-gsocket-for-persistent-linux-c2/","date":"2026-11-11","summary":"Microsoft reports threat actors deploy GSocket on compromised Linux servers for persistent access; remove the client, not just patch the app.","tags":["ecosystem","web","endpoint","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/hacker-claims-to-have-sold-stolen-exams-to-au-students-databreachesnet-reports/","title":"Hacker claims to have sold stolen exams to AU students, DataBreaches.net reports","url":"https://vulnpocalypse.dev/advisories/hacker-claims-to-have-sold-stolen-exams-to-au-students-databreachesnet-reports/","date":"2026-11-11","summary":"DataBreaches.net reports a hacker claims to have sold stolen exams to students in Australia; details are not confirmed, so monitor official notices.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/grok-app-builder-35578-public-grokme-apps-expose-data-and-passwords/","title":"Grok app builder: 35,578 public grok.me apps expose data and passwords","url":"https://vulnpocalypse.dev/advisories/grok-app-builder-35578-public-grokme-apps-expose-data-and-passwords/","date":"2026-11-11","summary":"Researchers found 35,578 of 37,571 Grok-built apps open without sign-in, some with passwords; check app access settings and unpublish unowned apps.","tags":["ai-tools","ai-tools","web","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/gbhackers-reports-fake-cloudflare-captcha-lures-hide-malware-in-png-images/","title":"GBHackers reports fake Cloudflare CAPTCHA lures hide malware in PNG images","url":"https://vulnpocalypse.dev/advisories/gbhackers-reports-fake-cloudflare-captcha-lures-hide-malware-in-png-images/","date":"2026-11-11","summary":"GBHackers reports Huntress research on fake Cloudflare CAPTCHA ClickFix lures that run PowerShell; never paste commands from a web page.","tags":["ecosystem","endpoint","web"]},{"id":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-2013-russian-forum-breach-data-resurfaces/","title":"DataBreaches.net reports 2013 Russian forum breach data resurfaces","url":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-2013-russian-forum-breach-data-resurfaces/","date":"2026-11-11","summary":"DataBreaches.net reports credentials from a 2013 Russian cybercrime forum breach have resurfaced; details are not confirmed, so monitor this story.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/chrome-cve-2026-125350-zero-day-update-to-1570810350/","title":"Chrome CVE-2026-125350 zero-day: update to 157.0.8103.50","url":"https://vulnpocalypse.dev/advisories/chrome-cve-2026-125350-zero-day-update-to-1570810350/","date":"2026-11-11","summary":"Google patched an actively exploited Chrome XML use-after-free, CVE-2026-125350; update Chrome to 157.0.8103.50 or later and relaunch.","tags":["exploited","web","endpoint"]},{"id":"https://vulnpocalypse.dev/advisories/check-point-reports-three-china-nexus-campaigns-linked-via-sparrow-malware/","title":"Check Point reports three China-nexus campaigns linked via Sparrow malware","url":"https://vulnpocalypse.dev/advisories/check-point-reports-three-china-nexus-campaigns-linked-via-sparrow-malware/","date":"2026-11-11","summary":"The Hacker News reports Check Point links three China-nexus espionage clusters via Sparrow malware; review indicators and sideloading alerts.","tags":["breach","endpoint","network-edge","web"]},{"id":"https://vulnpocalypse.dev/advisories/australia-to-mandate-ai-breach-reporting-after-openai-agent-hit-medicare-site/","title":"Australia to mandate AI breach reporting after OpenAI agent hit Medicare site","url":"https://vulnpocalypse.dev/advisories/australia-to-mandate-ai-breach-reporting-after-openai-agent-hit-medicare-site/","date":"2026-11-11","summary":"Australia will make AI firms report breaches after an OpenAI agent accessed a Medicare portal; AI operators should review incident reporting.","tags":["ai-tools","ai-tools","web"]},{"id":"https://vulnpocalypse.dev/advisories/who-gives-a-crap-says-supplier-breach-exposed-customer-data/","title":"Who Gives A Crap says supplier breach exposed customer data","url":"https://vulnpocalypse.dev/advisories/who-gives-a-crap-says-supplier-breach-exposed-customer-data/","date":"2026-11-11","summary":"Who Gives A Crap says an unnamed US marketing software supplier was breached, per The Register; customers should watch for phishing.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/sega-says-22m-customer-emails-exposed-in-arara-vendor-breach/","title":"Sega says 2.2M customer emails exposed in Arara vendor breach","url":"https://vulnpocalypse.dev/advisories/sega-says-22m-customer-emails-exposed-in-arara-vendor-breach/","date":"2026-11-11","summary":"Sega says about 2.2 million newsletter email addresses were exposed via Arara, its email provider; treat unexpected Sega emails with caution.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/gbhackers-reports-modsecurity-waf-upload-bypass-and-xml-flaw/","title":"GBHackers reports ModSecurity WAF upload bypass and XML flaw","url":"https://vulnpocalypse.dev/advisories/gbhackers-reports-modsecurity-waf-upload-bypass-and-xml-flaw/","date":"2026-11-11","summary":"GBHackers reports two ModSecurity advisories, an upload filter bypass and an XML bug; set SecParseXmlIntoArgs Off and validate decoded filenames.","tags":["exploited","open-source","web"]},{"id":"https://vulnpocalypse.dev/advisories/iris-ohyama-says-iris-plaza-cloud-breach-may-expose-77-million-people/","title":"Iris Ohyama says Iris Plaza cloud breach may expose 7.7 million people","url":"https://vulnpocalypse.dev/advisories/iris-ohyama-says-iris-plaza-cloud-breach-may-expose-77-million-people/","date":"2026-11-11","summary":"Iris Ohyama says unauthorized cloud access may have exposed data of 7.7 million Iris Plaza users, so change any reused Iris Plaza password now.","tags":["breach","cloud","web"]},{"id":"https://vulnpocalypse.dev/advisories/tata-motors-connected-car-app-flaws/","title":"CERT-In flags four flaws in Tata Motors iRA connected-car apps that let attackers impersonate owners","url":"https://vulnpocalypse.dev/advisories/tata-motors-connected-car-app-flaws/","date":"2026-11-11","summary":"CERT-In CIVN-2026-0537 details four high-severity flaws in Tata Motors iRA apps that let attackers impersonate car owners. Patched in iRA 2.0 26.8.2 / iRA.ev.","tags":["exploited","endpoint","web"]},{"id":"https://vulnpocalypse.dev/advisories/fake-gta-vi-download-sites-push-malware-and-crypto-scams-ahead-of-the-november-1/","title":"Fake GTA VI download sites push malware and crypto scams ahead of the November 19 launch","url":"https://vulnpocalypse.dev/advisories/fake-gta-vi-download-sites-push-malware-and-crypto-scams-ahead-of-the-november-1/","date":"2026-11-11","summary":"Netcraft found fake GTA VI leaked builds, early access and mobile downloads that deliver flagged malware or demand crypto before the November 19 launch.","tags":["ecosystem","endpoint","crypto","web"]},{"id":"https://vulnpocalypse.dev/advisories/critical-rails-active-storage-flaw-lets-crafted-imagemagick-uploads-write-server/","title":"Critical Rails Active Storage flaw lets crafted ImageMagick uploads write server files","url":"https://vulnpocalypse.dev/advisories/critical-rails-active-storage-flaw-lets-crafted-imagemagick-uploads-write-server/","date":"2026-11-11","summary":"A critical Rails Active Storage flaw lets unauthenticated uploads write files through ImageMagick, fixed in activestorage 8.1.4.1 and 8.0.5.2.","tags":["exploited","web","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/beget-hosting-cyberattack-wipes-cloud-data-vps-and-kubernetes-backups-lost/","title":"Beget hosting cyberattack wipes cloud data, VPS and Kubernetes backups lost","url":"https://vulnpocalypse.dev/advisories/beget-hosting-cyberattack-wipes-cloud-data-vps-and-kubernetes-backups-lost/","date":"2026-11-11","summary":"Attackers reached Beget's management systems and ran wipe scripts, destroying VPS, cloud storage and Kubernetes data and all binary VPS backups.","tags":["breach","cloud","web","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/apt29-watering-hole-campaign-serves-n-day-ios-and-android-exploits-via-hacked-si/","title":"APT29 watering hole campaign serves n-day iOS and Android exploits via hacked sites and Plerdy","url":"https://vulnpocalypse.dev/advisories/apt29-watering-hole-campaign-serves-n-day-ios-and-android-exploits-via-hacked-si/","date":"2026-11-11","summary":"Russia-linked APT29 used hacked sites, cloned domains and the Plerdy tracker to serve patched-flaw exploits to out-of-date iPhones and Android phones.","tags":["supply-chain","endpoint","web"]},{"id":"https://vulnpocalypse.dev/advisories/chrome-157-fixes-213-security-bugs-7-rated-critical-in-desktop-and-android-build/","title":"Chrome 157 fixes 213 security bugs, 7 rated critical, in desktop and Android builds","url":"https://vulnpocalypse.dev/advisories/chrome-157-fixes-213-security-bugs-7-rated-critical-in-desktop-and-android-build/","date":"2026-11-11","summary":"Google released Chrome 157 with 213 security fixes, seven rated critical, and has not said any of them are exploited in the wild.","tags":["exploited","web","endpoint"]},{"id":"https://vulnpocalypse.dev/advisories/billboard-hijacks-in-egypt-malaysia-and-brazil-show-explicit-video/","title":"Billboard hijacks in Egypt, Malaysia and Brazil show explicit video","url":"https://vulnpocalypse.dev/advisories/billboard-hijacks-in-egypt-malaysia-and-brazil-show-explicit-video/","date":"2026-11-11","summary":"Explicit video appeared on LED billboards in Egypt, Malaysia and Brazil; operators should keep screen content systems off the public internet.","tags":["exploited","network-edge","web","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/polymarket-traders-drained-via-hijacked-debugbear-monitoring-script-dns-compromi/","title":"Polymarket traders drained via hijacked DebugBear monitoring script, DNS compromise cited","url":"https://vulnpocalypse.dev/advisories/polymarket-traders-drained-via-hijacked-debugbear-monitoring-script-dns-compromi/","date":"2026-11-11","summary":"A DebugBear monitoring script on Polymarket.com was swapped for wallet-draining code on October 29, costing traders about 2.7 million dollars.","tags":["supply-chain","web","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/florida-department-of-education-confirms-financial-aid-site-breach-exposing-ssns/","title":"Florida Department of Education confirms financial aid site breach exposing SSNs of about 4.9 million people","url":"https://vulnpocalypse.dev/advisories/florida-department-of-education-confirms-financial-aid-site-breach-exposing-ssns/","date":"2026-11-11","summary":"Florida's education department says hackers accessed its student financial aid website, exposing Social Security numbers and other data of about 4.9 million","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/revolve-card-data-breach-exposes-saved-payment-card-numbers-and-expiry-dates/","title":"Revolve card data breach exposes saved payment card numbers and expiry dates","url":"https://vulnpocalypse.dev/advisories/revolve-card-data-breach-exposes-saved-payment-card-numbers-and-expiry-dates/","date":"2026-11-11","summary":"Revolve says an unauthorized actor may have taken names, contact details, card numbers and expiry dates from saved payment info in customer accounts.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/italy-intel471-reports-outlier-rates-of-vulnerability-based-initial-access/","title":"Italy: Intel471 reports outlier rates of vulnerability-based initial access","url":"https://vulnpocalypse.dev/advisories/italy-intel471-reports-outlier-rates-of-vulnerability-based-initial-access/","date":"2026-11-11","summary":"Dark Reading reports Intel471 data showing Italian firms are outliers in sold access via vulnerabilities; patch exposed web systems and retire old PHP.","tags":["exploited","web","php","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/wordpress-7-1-4-core-update-race-rce/","title":"WordPress 7.1.4 core update race (GHSA-4w3m-c66w-69mg): unauthenticated code execution during upgrades, now under attack","url":"https://vulnpocalypse.dev/advisories/wordpress-7-1-4-core-update-race-rce/","date":"2026-11-11","summary":"Full core updates in WordPress 4.7 to 7.1.3 open a brief unauthenticated RCE window. Update to 7.1.4 or your branch's fix and block wp-content/upgrade.","tags":["exploited","php","web"]},{"id":"https://vulnpocalypse.dev/advisories/fec-e-filing-system-offline-after-reported-attempt-to-breach-reuters-reports/","title":"FEC e-filing system offline after reported attempt to breach, Reuters reports","url":"https://vulnpocalypse.dev/advisories/fec-e-filing-system-offline-after-reported-attempt-to-breach-reuters-reports/","date":"2026-11-11","summary":"Reuters reports the US FEC took its e-filing system offline after a bad actor attempted to breach it, so filers should watch FEC status notices.","tags":["ecosystem","web"]},{"id":"https://vulnpocalypse.dev/advisories/drupal-commerce-cve-2026-118539/","title":"Drupal Commerce Core CVE-2026-118539: highly critical access bypass exploited against online stores","url":"https://vulnpocalypse.dev/advisories/drupal-commerce-cve-2026-118539/","date":"2026-11-11","summary":"An exploited access bypass in Drupal Commerce Core can cost store owners money. Update to Commerce 3.3.13 or 8.x-2.41 and audit recent orders.","tags":["exploited","php","web","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/dhs-employee-data-leak-41000-workers-exposed-in-icepick-archive-said-to-come-fro/","title":"DHS employee data leak: 41,000 workers exposed in Icepick archive said to come from Okta login system","url":"https://vulnpocalypse.dev/advisories/dhs-employee-data-leak-41000-workers-exposed-in-icepick-archive-said-to-come-fro/","date":"2026-11-11","summary":"A group called Department of Peace leaked records on more than 41,000 DHS staff and contractors, which it says came from the DHS Okta login system.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/cisco-finesse-cve-2026-20362-ssrf-horizon3-reports-unpatched-flaw/","title":"Cisco Finesse CVE-2026-20362 SSRF, Horizon3 reports unpatched flaw","url":"https://vulnpocalypse.dev/advisories/cisco-finesse-cve-2026-20362-ssrf-horizon3-reports-unpatched-flaw/","date":"2026-11-11","summary":"Horizon3 reports an unauthenticated SSRF in Cisco Finesse with fixes due in 2027; restrict the web interface to trusted networks or VPN until patched.","tags":["exploited","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/anthropic-ai-model-chained-flaws-into-chrome-safari-android-windows-and-linux-ex/","title":"Anthropic AI model chained flaws into Chrome, Safari, Android, Windows and Linux exploits","url":"https://vulnpocalypse.dev/advisories/anthropic-ai-model-chained-flaws-into-chrome-safari-android-windows-and-linux-ex/","date":"2026-11-11","summary":"Anthropic says an unreleased model chained flaws into five working exploits for Chrome, Safari, Android, Windows and Linux, all reported and patched.","tags":["ai-tools","ai-tools","web","endpoint","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/123-reg-discloses-ai-driven-cyberattack-on-customer-data-suspects-china-nexus/","title":"123 Reg discloses AI-driven cyberattack on customer data, suspects China nexus","url":"https://vulnpocalypse.dev/advisories/123-reg-discloses-ai-driven-cyberattack-on-customer-data-suspects-china-nexus/","date":"2026-11-11","summary":"123 Reg says a September 18 intrusion exposed customer contact and account data, and customers should turn on two-step verification and watch for phishing.","tags":["breach","web"]},{"id":"https://vulnpocalypse.dev/advisories/growi-jvn-discloses-three-authorization-flaws-up-to-v806-fixed-in-v807/","title":"GROWI: JVN discloses three authorization flaws up to v8.0.6, fixed in v8.0.7","url":"https://vulnpocalypse.dev/advisories/growi-jvn-discloses-three-authorization-flaws-up-to-v806-fixed-in-v807/","date":"2026-11-11","summary":"JVN discloses three authorization flaws in GROWI up to v8.0.6 that let users read or alter pages they should not, so upgrade GROWI to v8.0.7.","tags":["exploited","web","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/afd-email-hosting-provider-attack-exposed-345k-accounts-the-register-reports/","title":"AfD email hosting provider attack exposed 345k accounts, The Register reports","url":"https://vulnpocalypse.dev/advisories/afd-email-hosting-provider-attack-exposed-345k-accounts-the-register-reports/","date":"2026-11-11","summary":"The Register reports an attack on the AfD email hosting provider exposed over 345,000 addresses. Check Have I Been Pwned for your address.","tags":["breach","web","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/gmo-internet-and-park24-disclose-cyberattacks-and-pay-users-report-says/","title":"GMO Internet and Park24 disclose cyberattacks and pay users, report says","url":"https://vulnpocalypse.dev/advisories/gmo-internet-and-park24-disclose-cyberattacks-and-pay-users-report-says/","date":"2026-11-11","summary":"GMO Internet Group and Park24 say they will compensate users after cyberattacks, Indian Express reports; customers should follow company notices.","tags":["breach","enterprise","web","php"]},{"id":"https://vulnpocalypse.dev/advisories/apple-ios-macos-safari-27-2-webkit/","title":"Apple iOS 27.2, macOS 27.2 and Safari 27.2 fix 163 CVEs, including a WebKit sandbox escape (CVE-2026-112697, CVE-2026-113897)","url":"https://vulnpocalypse.dev/advisories/apple-ios-macos-safari-27-2-webkit/","date":"2026-11-11","summary":"Apple's 26 October updates fix 163 CVEs in iOS 27.2, including WebKit code execution and a sandbox escape. Update iOS, macOS, Safari and older-device builds.","tags":["exploited","endpoint","web"]},{"id":"https://vulnpocalypse.dev/advisories/symantec-reports-ai-attack-agent-built-to-hijack-exposed-model-endpoints/","title":"Symantec reports AI attack agent built to hijack exposed model endpoints","url":"https://vulnpocalypse.dev/advisories/symantec-reports-ai-attack-agent-built-to-hijack-exposed-model-endpoints/","date":"2026-11-11","summary":"Symantec reports an AI attack agent built to hijack unauthenticated OpenAI-style endpoints, so require authentication on any model endpoint you expose.","tags":["ai-tools","ai-tools","web","nextjs","cloud","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/ahold-delhaize-cyberattack-2026/","title":"Ahold Delhaize cyberattack: websites and apps offline at Albert Heijn, Delhaize, Stop & Shop, Giant and Hannaford","url":"https://vulnpocalypse.dev/advisories/ahold-delhaize-cyberattack-2026/","date":"2026-11-11","summary":"Ahold Delhaize took most brands' websites and apps offline in Europe and the US after malicious activity in its network on 12 Oct 2026. No data theft found yet.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/crafty-falcon-ai-attacks-indian-nbfcs-payment-apis/","title":"CRAFTY FALCON: CERT-In warns AI-driven attacks are draining Indian BFSI through their own payment APIs","url":"https://vulnpocalypse.dev/advisories/crafty-falcon-ai-attacks-indian-nbfcs-payment-apis/","date":"2026-11-11","summary":"CERT-In advisory CIAD-2026-0058 names CRAFTY FALCON, an AI-assisted actor invoking Indian NBFC and fintech payment APIs to move funds at machine speed.","tags":["ai-tools","ai-tools","enterprise","cloud","web","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/artex-ai-pentest-framework-abused-in-data-theft-from-south-korean-banks/","title":"ARTEX AI pentest framework abused in data theft from South Korean banks","url":"https://vulnpocalypse.dev/advisories/artex-ai-pentest-framework-abused-in-data-theft-from-south-korean-banks/","date":"2026-11-11","summary":"A suspected Chinese-speaking, financially motivated actor used the ARTEX agentic pentest tool to steal data from South Korean financial firms.","tags":["ai-tools","ai-tools","open-source","web","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/sph-media-says-no-customer-financial-data-exposed-after-cyberattacks/","title":"SPH Media says no customer financial data exposed after cyberattacks","url":"https://vulnpocalypse.dev/advisories/sph-media-says-no-customer-financial-data-exposed-after-cyberattacks/","date":"2026-11-10","summary":"DataBreaches.net reports SPH Media says cyberattacks hit it, no customer financial data exposed; check SPH Media's own notices.","tags":["breach","enterprise","web"]}]}