Q2 2026 saw a record surge in registered CVEs driven by AI-assisted vulnerability research, with entire new vulnerability classes discovered in the Linux kernel caching subsystem (Dirty Frag family). A researcher published working exploits for six unpatched Windows vulnerabilities before CVE assignment, including multiple Windows Defender privilege escalation flaws and a BitLocker bypass. APT groups rapidly adopted newly disclosed vulnerabilities and began targeting AI infrastructure. AI tools themselves accumulated significant vulnerability counts, with critical issues in OpenClaw (credential theft via WebSocket), Dify (tenant isolation bypass), and Open WebUI (broken access control).
AI vulnerabilities
2 posts
Exploits and vulnerabilities in Q2 2026 10th August – Threat Intelligence Report This weekly threat intelligence report covers multiple active campaigns and critical vulnerabilities. Notable items include a large-scale npm supply-chain compromise (Shai-Hulud CHAINDROP) affecting 400+ packages, critical vulnerabilities in AI coding tools (Gemini CLI and Claude Code), a vendor-installed backdoor in Zbtlink routers, and a macOS ClickFix campaign distributing infostealers via 250+ look-alike domains. Multiple critical patches were released for Cisco SD-WAN/IOS XE, WordPress, and TP-Link Omada products.