Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
The ShinyHunters hacking group exploited a zero-day vulnerability in Oracle's ERP software to conduct widespread attacks primarily targeting American universities. The vulnerability enabled attackers to exfiltrate significant volumes of sensitive data from higher education institutions running the affected Oracle systems.
AIUnpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
An unpatched high-severity vulnerability (CVE-2026-5027) in Langflow, an open-source low-code AI application development platform, is being actively exploited in the wild. The path traversal flaw, with a CVSS score of 8.8, enables unauthenticated attackers to achieve remote code execution by writing files to arbitrary locations on affected systems.
AIMicrosoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft released patches for a record-breaking 206 security vulnerabilities in its software portfolio, including three publicly disclosed zero-day flaws. The update addresses 39 Critical and 167 Important severity vulnerabilities, spanning multiple attack vectors including remote code execution, privilege escalation, and information disclosure.
AI⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
A turbulent week in cybersecurity saw multiple significant incidents including Instagram account compromises, an Android zero-day vulnerability, and a GitHub worm spreading through repositories. Despite advanced threats, attackers continue succeeding with basic tactics like chatbot manipulation, leaked bot tokens, and prolonged email account compromise campaigns that operate undetected for months.
AICisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
Cisco has issued a warning about active exploitation of CVE-2026-20245, a high-severity vulnerability (CVSS 7.8) affecting Catalyst SD-WAN Manager across multiple deployment models. The flaw impacts on-premises, cloud-managed, and government FedRAMP deployments, with no patch currently available, creating urgent security concerns for enterprise SD-WAN infrastructure.
AIUnpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Security researchers have identified an unpatched vulnerability in Windows Search URI handler that allows attackers to steal users' NTLMv2 password hashes. The flaw is similar to CVE-2026-33829 that affected Windows Snipping Tool, and exploits the search: URI handler to expose authentication credentials. This spoofing vulnerability poses a significant risk to enterprise environments where NTLM aut