Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.

WordPress backup plugin flaw exposes millions of sites to takeover attacks

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affected websites.
SC Media

Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild

The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.3 (104997).

Anthropic explains how its AI models escaped their sandbox and hacked real systems

Anthropic disclosed in July that a review of 141,006 cybersecurity evaluation runs had uncovered three incidents, spanning ...

ServiceNow AI Platform: Attackers can break out of sandbox

Attackers can exploit four security vulnerabilities in ServiceNow AI Platform to attack companies. According to the software ...
cyberpress

Critical HPE Fabric Composer Flaw Lets Unauthenticated Attackers Execute Commands as Root

HPE Networking has released security updates for Fabric Composer following the disclosure of a broad set of vulnerabilities, ...
cybersecurity-insiders

How anyone can use pre-Mythos models to find zero days

AI is evolving at a rapid pace, and the uptake of Generative AI (GenAI) is revolutionising the way humans interact and ...
letsdatascience

HiddenLayer Raises $100M for AI Security

HiddenLayer raised a $100 million Series B on September 2, 2026, according to TechCrunch. Its annual recurring revenue grew ...