Skip to content

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

Most “AI Malware” Isn’t Actually Hitting Anyone
  • Vulnerabilities

Most “AI Malware” Isn’t Actually Hitting Anyone

August 29, 2026
8 mins
Hackers Turned Cursor AI Into an Attack Tool
  • Vulnerabilities

Hackers Turned Cursor AI Into an Attack Tool

August 29, 2026August 29, 2026
8 mins
Rhysida Wants 30 Bitcoin for Berlin’s Stolen Data
  • Vulnerabilities

Rhysida Wants 30 Bitcoin for Berlin’s Stolen Data

August 29, 2026
7 mins
Citrix NetScaler Bug Escalates Into Unauthenticated RCE
  • Vulnerabilities

Citrix NetScaler Bug Escalates Into Unauthenticated RCE

August 29, 2026
7 mins
ZBT Routers Shipped With Root Backdoors — 203 Are Exposed Online
  • Vulnerabilities

ZBT Routers Shipped With Root Backdoors — 203 Are Exposed Online

August 29, 2026August 29, 2026
7 mins
A British Power Plant Went Offline for Four Days After a Cyberattack
  • Vulnerabilities

A British Power Plant Went Offline for Four Days After a Cyberattack

August 29, 2026
6 mins
APT28 Has a New Backdoor — HOOKEDGE Hides Inside Microsoft Edge
  • Vulnerabilities

APT28 Has a New Backdoor — HOOKEDGE Hides Inside Microsoft Edge

August 29, 2026
7 mins
Hundreds of WordPress Sites Are Now Trapping Windows Users With Fake reCAPTCHA
  • Vulnerabilities

Hundreds of WordPress Sites Are Now Trapping Windows Users With Fake reCAPTCHA

August 29, 2026August 29, 2026
7 mins
Unitree G1 Can Be Rooted Over Bluetooth — No Pairing Required
  • Vulnerabilities

Unitree G1 Can Be Rooted Over Bluetooth — No Pairing Required

August 28, 2026
7 mins
Hasbro Confirms Employee Data Breach — Hackers Got More Than Names and Emails
  • Vulnerabilities

Hasbro Confirms Employee Data Breach — Hackers Got More Than Names and Emails

August 28, 2026
6 mins
OpenAI’s AI Agents Exploited a Linux Kernel Flaw — Then Got Root
  • Vulnerabilities

OpenAI’s AI Agents Exploited a Linux Kernel Flaw — Then Got Root

August 28, 2026August 28, 2026
7 mins
ServiceNow Patches Three CVSS 10.0 Flaws — Unauthenticated Attackers Could Execute Code and Run SQL
  • Vulnerabilities

ServiceNow Patches Three CVSS 10.0 Flaws — Unauthenticated Attackers Could Execute Code and Run SQL

August 28, 2026
7 mins
644 GB Stolen From Water Infrastructure Supplier — FBI Investigates Micro-Comm Breach
  • Vulnerabilities

644 GB Stolen From Water Infrastructure Supplier — FBI Investigates Micro-Comm Breach

August 28, 2026
6 mins
ShinyHunters Claim $13M CyrusOne Breach — Data Center Secrets Allegedly Stolen
  • Vulnerabilities

ShinyHunters Claim $13M CyrusOne Breach — Data Center Secrets Allegedly Stolen

August 28, 2026
7 mins
German Companies Are Becoming Prime Targets for Chinese and Russian Cyber Espionage
  • Vulnerabilities

German Companies Are Becoming Prime Targets for Chinese and Russian Cyber Espionage

August 28, 2026
6 mins
Gitea CVE-2026-60004 Is Now Actively Exploited — Attackers Deploy Cryptominers
  • Vulnerabilities

Gitea CVE-2026-60004 Is Now Actively Exploited — Attackers Deploy Cryptominers

August 28, 2026
6 mins
Australia Arrests Two Suspected TeamPCP Members in Cybercrime Investigation
  • Vulnerabilities

Australia Arrests Two Suspected TeamPCP Members in Cybercrime Investigation

August 28, 2026
5 mins
U.S. Seizes Chinese Hacking Infrastructure Used Against NASA, DOJ and Federal Reserve
  • Vulnerabilities

U.S. Seizes Chinese Hacking Infrastructure Used Against NASA, DOJ and Federal Reserve

August 28, 2026
7 mins
GoCaracal Uses Ethereum Smart Contracts to Keep Malware C2 Alive
  • Vulnerabilities

GoCaracal Uses Ethereum Smart Contracts to Keep Malware C2 Alive

August 28, 2026August 28, 2026
7 mins
Unpatched Calix Router Flaw Can Expose Devices Behind NAT to the Internet
  • Vulnerabilities

Unpatched Calix Router Flaw Can Expose Devices Behind NAT to the Internet

August 28, 2026August 28, 2026
5 mins
ATF Confirms Major Cyber Incident After Qilin Claims Breach
  • Vulnerabilities

ATF Confirms Major Cyber Incident After Qilin Claims Breach

August 28, 2026
5 mins
Linux Kernel Double-Free Vulnerability Gets Public PoC — Local Root Risk
  • Vulnerabilities

Linux Kernel Double-Free Vulnerability Gets Public PoC — Local Root Risk

August 28, 2026August 28, 2026
5 mins
Russian-Speaking Hackers Used Cursor AI to Break Into Seven Companies
  • Vulnerabilities

Russian-Speaking Hackers Used Cursor AI to Break Into Seven Companies

August 28, 2026
6 mins
Boston Scientific Hit by Cyberattack — Global Operations and Medical Device Orders Disrupted
  • Vulnerabilities

Boston Scientific Hit by Cyberattack — Global Operations and Medical Device Orders Disrupted

August 28, 2026August 28, 2026
6 mins
8.7 Million Customers Hit in UK Airport Cyberattack — Manchester, Stansted and East Midlands Data Stolen
  • Vulnerabilities

8.7 Million Customers Hit in UK Airport Cyberattack — Manchester, Stansted and East Midlands Data Stolen

August 28, 2026
6 mins
APT28 Revives Old Malware to Spy on Ukrainian Targets
  • Vulnerabilities

APT28 Revives Old Malware to Spy on Ukrainian Targets

August 28, 2026
4 mins
Nutex Health Hit by Cyberattack — Patient Data May Be Among the Stolen Files
  • Vulnerabilities

Nutex Health Hit by Cyberattack — Patient Data May Be Among the Stolen Files

August 28, 2026
4 mins
Two Unpatched Kaltura Flaws Can Read Server Files and Execute Code
  • Vulnerabilities

Two Unpatched Kaltura Flaws Can Read Server Files and Execute Code

August 28, 2026
4 mins
Microsoft SharePoint RCE Chain Is Being Exploited With a Public PoC
  • Vulnerabilities

Microsoft SharePoint RCE Chain Is Being Exploited With a Public PoC

August 28, 2026August 28, 2026
5 mins
Nearly 700 AI Agents Worked Together in a Cyberattack — Hugging Face Became the Test Bed
  • Vulnerabilities

Nearly 700 AI Agents Worked Together in a Cyberattack — Hugging Face Became the Test Bed

August 28, 2026
5 mins
Critical Gitea RCE Is Under Active Exploitation — Your Git Server May Already Be Running Someone Else’s Code
  • Vulnerabilities

Critical Gitea RCE Is Under Active Exploitation — Your Git Server May Already Be Running Someone Else’s Code

August 28, 2026
4 mins
TEAMCITY RCE: THIS ONE DESERVES MORE THAN A PATCH
  • Vulnerabilities

TEAMCITY RCE: THIS ONE DESERVES MORE THAN A PATCH

August 27, 2026August 27, 2026
1 min
Citrix NetScaler Hit by New Exploited Flaw — Web Shells Found on Compromised Systems
  • Vulnerabilities

Citrix NetScaler Hit by New Exploited Flaw — Web Shells Found on Compromised Systems

August 27, 2026
5 mins
QTFY Hacking Network Hit NASA, the Senate and Critical Infrastructure Before the FBI Shut It Down
  • Vulnerabilities

QTFY Hacking Network Hit NASA, the Senate and Critical Infrastructure Before the FBI Shut It Down

August 27, 2026August 27, 2026
6 mins
GPUThor Breaks the Safety Net — Rowhammer Now Targets NVIDIA GPU Memory
  • Vulnerabilities

GPUThor Breaks the Safety Net — Rowhammer Now Targets NVIDIA GPU Memory

August 27, 2026August 27, 2026
5 mins
Old ownCloud Flaw Was Used to Steal Nuclear Research Data
  • Vulnerabilities

Old ownCloud Flaw Was Used to Steal Nuclear Research Data

August 27, 2026
5 mins
PaperCut Warns of Active Attacks — But the Vulnerability Details Are Still Being Withheld
  • Vulnerabilities

PaperCut Warns of Active Attacks — But the Vulnerability Details Are Still Being Withheld

August 27, 2026
4 mins
Microsoft Teams Helpdesk Scam Is Back — New SynkLoader Campaign Targets Corporate Users
  • Vulnerabilities

Microsoft Teams Helpdesk Scam Is Back — New SynkLoader Campaign Targets Corporate Users

August 27, 2026August 27, 2026
6 mins
Zimbra Servers Are Being Hacked in a New Wave of CVE-2026-73570 Attacks
  • Vulnerabilities

Zimbra Servers Are Being Hacked in a New Wave of CVE-2026-73570 Attacks

August 27, 2026
6 mins
Carhartt Data Breach: 12.9 Million Real Accounts Exposed — But the Original Number Was Massively Inflated
  • Vulnerabilities

Carhartt Data Breach: 12.9 Million Real Accounts Exposed — But the Original Number Was Massively Inflated

August 27, 2026August 27, 2026
6 mins
TeamPCP Hackers Arrested After Supply-Chain Attacks Hit the Open-Source Ecosystem
  • Vulnerabilities

TeamPCP Hackers Arrested After Supply-Chain Attacks Hit the Open-Source Ecosystem

August 27, 2026August 27, 2026
6 mins
Gitea RCE CVE-2026-60004 Is Now Under Active Attack
  • Vulnerabilities

Gitea RCE CVE-2026-60004 Is Now Under Active Attack

August 27, 2026August 27, 2026
5 mins
Nutex Health Confirms Data Theft After Attackers Broke Into Its Network
  • Vulnerabilities

Nutex Health Confirms Data Theft After Attackers Broke Into Its Network

August 27, 2026
5 mins
ATF Confirms Major Cyber Incident After Qilin Ransomware Claims
  • Vulnerabilities

ATF Confirms Major Cyber Incident After Qilin Ransomware Claims

August 27, 2026August 27, 2026
5 mins
Boston Scientific Hit by Cyberattack, Disrupting Global Customer Orders
  • Vulnerabilities

Boston Scientific Hit by Cyberattack, Disrupting Global Customer Orders

August 27, 2026August 27, 2026
5 mins
Hackers Turned Cursor Into an Attack Tool — Seven Companies Hit
  • Vulnerabilities

Hackers Turned Cursor Into an Attack Tool — Seven Companies Hit

August 27, 2026
6 mins
Claude Opus 4.6 Autonomously Exploited a Gym API — And Repeated the Attack
  • Vulnerabilities

Claude Opus 4.6 Autonomously Exploited a Gym API — And Repeated the Attack

August 27, 2026
5 mins
CISA Adds Six Actively Exploited Vulnerabilities — Linux and SQL Server Are in the List
  • Vulnerabilities

CISA Adds Six Actively Exploited Vulnerabilities — Linux and SQL Server Are in the List

August 27, 2026
4 mins
CISA Red Team Took Over Critical Infrastructure. One SOC Barely Saw It
  • Vulnerabilities

CISA Red Team Took Over Critical Infrastructure. One SOC Barely Saw It

August 27, 2026August 27, 2026
5 mins
Lazarus Used a Windows Zero-Day to Turn Fake Job Offers Into Full System Takeover
  • Vulnerabilities

Lazarus Used a Windows Zero-Day to Turn Fake Job Offers Into Full System Takeover

August 27, 2026
6 mins
GPUThor: Rowhammer Attack Can Bypass NVIDIA GPU ECC and Reach Host Root
  • Vulnerabilities

GPUThor: Rowhammer Attack Can Bypass NVIDIA GPU ECC and Reach Host Root

August 27, 2026
4 mins
Log4j2 Has a Deserialization Bypass. No, This Is Not Another Log4Shell
  • Vulnerabilities

Log4j2 Has a Deserialization Bypass. No, This Is Not Another Log4Shell

August 27, 2026August 27, 2026
4 mins
GitLab Claude Agent Could Run Attacker Commands Inside CI Pipelines
  • Vulnerabilities

GitLab Claude Agent Could Run Attacker Commands Inside CI Pipelines

August 27, 2026
4 mins
Veeam ONE Has a Critical SMB Coercion Bug. Your Backup Server Can Be Forced to Authenticate
  • Vulnerabilities

Veeam ONE Has a Critical SMB Coercion Bug. Your Backup Server Can Be Forced to Authenticate

August 27, 2026
4 mins
Apache Tomcat Just Got Hit With a Wave of Security Bugs
  • Vulnerabilities

Apache Tomcat Just Got Hit With a Wave of Security Bugs

August 27, 2026
4 mins
Hackers Used an Autonomous AI Agent to Attack Thailand’s Finance Ministry
  • Vulnerabilities

Hackers Used an Autonomous AI Agent to Attack Thailand’s Finance Ministry

August 27, 2026August 27, 2026
4 mins
The U.S. Just Disrupted a Chinese Hacking Platform Used Against Critical Infrastructure
  • Vulnerabilities

The U.S. Just Disrupted a Chinese Hacking Platform Used Against Critical Infrastructure

August 27, 2026August 27, 2026
3 mins
NVIDIA OpenShell Has a Sandbox Escape Bug. AI Infrastructure Gets Its Own Attack Surface
  • Vulnerabilities

NVIDIA OpenShell Has a Sandbox Escape Bug. AI Infrastructure Gets Its Own Attack Surface

August 27, 2026
3 mins
Cyberattack Hits Boston Scientific. Medical Device Shipments Are Disrupted
  • Vulnerabilities

Cyberattack Hits Boston Scientific. Medical Device Shipments Are Disrupted

August 27, 2026
4 mins
Citrix NetScaler Is Under Attack. Hackers Are Already Dropping Web Shells
  • Vulnerabilities

Citrix NetScaler Is Under Attack. Hackers Are Already Dropping Web Shells

August 27, 2026
3 mins

Posts navigation

Older posts
Newer posts

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

© 2026 Bugstoday™ — Independent Cybersecurity & Technology Publication.