ServiceNow AI Platform RCE CVE-2026-6875 is under active exploitation days after the self-hosted patch release. Attackers are using a second sandbox escape route, so WAF rules are not enough. Patch now.

Qilin ransomware GlobalProtect VPN bypass attacks exploit Palo Alto CVE-2026-0257 to gain VPN access, steal credentials, move laterally, and encrypt domains. Patch PAN-OS, terminate sessions, and hunt for compromise now.

msaRAT malware Chrome Edge C2 traffic hides inside trusted browser processes using CDP, WebRTC, Cloudflare Workers, and Twilio TURN relays. Chaos ransomware operators use this architecture to evade network detection and hide real C2 infrastructure.

A Hotel Wi-Fi attack is stealing Microsoft 365 credentials without phishing or malware. Attackers poison DNS on compromised public Wi-Fi gateways to capture logins and tokens.

The Arista VeloCloud zero-day CVE-2026-16812 is under active exploitation. Patch VCO now, restrict access, rotate credentials, and investigate logs.

The COLDCARD RNG flaw exposed Bitcoin wallet seeds generated on affected firmware. Users must update firmware, generate new seeds, and migrate funds safely.