Tag: vulnerability

All the articles with the tag "vulnerability".

• JADEPUFFER's 19-Day Upgrade: Ransomware Built to Destroy AI Models

  31 Jul, 2026

  Sysdig TRT says the JADEPUFFER actor returned to the same unpatched Langflow instance with ENCFORGE, a Go ransomware that targets model checkpoints, vector databases and training data.

• A $25 Subscription Found the First Pre-Auth WordPress Core RCE in a Decade

  20 Jul, 2026

  Searchlight Cyber pointed GPT5.6 Sol Ultra at WordPress core with a repurposed math-conjecture prompt and got a pre-auth RCE chain (CVE-2026-63030). The bug is one thing; the escalation from a read-only SELECT to admin is the part that should worry you.