https://test.threatfrontier.com/articles/wso2-api-manager-cve-2026-5430-jwt-bypass-exploited ThreatFrontier.com en 2026-10-02T12:06:11.824Z WSO2 API Manager JWT Bypass Exploited 133 Days After the Fix https://test.threatfrontier.com/articles/mythos-rejetto-hfs-cve-2026-61500-math-random-admin-cookie ThreatFrontier.com en 2026-10-02T12:06:09.858Z Mythos Cracked Rejetto HFS Sessions From 12 Leaked Math.random() Values https://test.threatfrontier.com/articles/f5-big-ip-apm-cve-2026-94127-unauthenticated-rce ThreatFrontier.com en 2026-10-02T12:06:07.265Z F5 BIG-IP APM: An Oversized Bearer Token Is Enough for Unauthenticated RCE https://test.threatfrontier.com/articles/apple-coregraphics-zero-day-cve-2026-86950 ThreatFrontier.com en 2026-10-02T12:06:02.570Z Apple Patches CoreGraphics Zero-Day Used Against Targeted iPhone Users https://test.threatfrontier.com/articles/ollama-agent-mode-cve-2026-102697-approval-bypass ThreatFrontier.com en 2026-10-02T12:06:00.441Z Ollama's Agent Mode Approved Bash Commands by Prefix, So Prompt Injection Could Chain Its Own (CVE-2026-102697) https://test.threatfrontier.com/articles/wordpress-core-cve-2026-87902-path-traversal-rce-exploited ThreatFrontier.com en 2026-10-02T12:05:58.661Z WordPress Core Flaw CVE-2026-87902 Drew Exploit Attempts on Patch Day https://test.threatfrontier.com/articles/check-point-cve-2026-93616-cve-2026-85102-exploited ThreatFrontier.com en 2026-10-02T12:05:56.909Z Check Point Management Servers Were a Zero-Day for Two Months Before the Fix https://test.threatfrontier.com/articles/mcp-atlassian-cve-2026-77244-unauthenticated-operator-access ThreatFrontier.com en 2026-10-02T12:05:55.155Z MCP Atlassian Server Let Anyone on the Network Act as the Operator in Jira and Confluence https://test.threatfrontier.com/articles/cisco-sd-wan-manager-cve-2026-76504-hex-encoding-auth-bypass ThreatFrontier.com en 2026-10-02T12:05:52.832Z Cisco SD-WAN Manager Zero-Day CVE-2026-76504: One Encoded Character Unlocks the Admin API https://test.threatfrontier.com/articles/fortimail-cve-2026-104286-exploited-no-patch ThreatFrontier.com en 2026-10-02T12:05:50.188Z Exploited FortiMail Flaw Has No Patch Yet: Disable IBE Now https://test.threatfrontier.com/articles/memtensor-openclaw-plugin-memoryos-sckit-worm ThreatFrontier.com en 2026-10-02T12:05:42.195Z MemTensor's OpenClaw Plugin and MemoryOS Shipped the sckit Credential Worm https://test.threatfrontier.com/articles/stolen-chatgpt-logins-358-of-482-companies-socradar ThreatFrontier.com en 2026-10-02T12:05:39.887Z Stolen ChatGPT Logins Turned Up at 358 of 482 Big Companies https://test.threatfrontier.com/articles/xing4-0-29b-a4b-china-telecom-swe-bench-coding-model ThreatFrontier.com en 2026-10-02T12:05:36.258Z Xing4.0-29B-A4B: China Telecom's Open Coding Model Claims SWE-bench 75 on One GPU https://test.threatfrontier.com/articles/github-copilot-retires-six-models-october-19 ThreatFrontier.com en 2026-10-02T12:05:33.050Z GitHub Copilot Drops Six Models on Oct 19: What Replaces GPT-5.5, GPT-5.4 and Grok 4.5 https://test.threatfrontier.com/articles/openai-moonshot-encrypted-reasoning-replay-distillation ThreatFrontier.com en 2026-10-02T12:05:30.800Z OpenAI Says Moonshot-Linked Accounts Replayed Encrypted Reasoning to Distill Its Models https://test.threatfrontier.com/articles/carbonato-botnet-docker-hermes-agent-ai-api-keys ThreatFrontier.com en 2026-10-02T12:05:29.029Z CARBONATO Botnet Turns Exposed Docker Hosts Into Hermes Agent Bots That Hunt AI Keys https://test.threatfrontier.com/articles/pixelleak-ai-coding-agents-leaked-13000-screenshots-to-public-github ThreatFrontier.com en 2026-10-02T12:05:27.280Z PixelLeak: AI Coding Agents Pushed 13,000 Internal Screenshots to Public GitHub Repos https://test.threatfrontier.com/articles/openai-pauses-tool-use-after-training-agent-escaped-through-dns ThreatFrontier.com en 2026-10-02T12:05:25.441Z OpenAI Pauses Tool Use on Its Most Capable Models After a Training Agent Escaped Through DNS https://test.threatfrontier.com/articles/plugin4shell-pinned-sha-bypass-claude-code-codex-copilot-gemini-cli ThreatFrontier.com en 2026-10-02T12:05:23.446Z Plugin4Shell: A Pinned Commit SHA Didn't Stop Repo Owners Swapping Plugin Code in Claude Code, Codex, Copilot and Gemini CLI https://test.threatfrontier.com/articles/claude-sonnet-4-5-retirement-sonnet-5-5-migration ThreatFrontier.com en 2026-10-02T12:05:20.490Z Claude Sonnet 4.5 Retires Nov 30: Six Requests That Return a 400 on Sonnet 5.5 https://test.threatfrontier.com/articles/mcp-python-sdk-oauth-credential-theft-issuer-fix ThreatFrontier.com en 2026-10-02T11:33:51.820Z Official MCP Python SDK Let Malicious Servers Steal OAuth Secrets, and Upgrading Isn't Enough https://test.threatfrontier.com/articles/ai-agent-breaches-divd-zammad-zero-days ThreatFrontier.com en 2026-10-02T11:33:33.999Z AI Agent Breached Bug-Hunting Nonprofit DIVD by Chaining Two Zammad Zero-Days https://test.threatfrontier.com/articles/tensorfold-local-llm-server-unauthenticated-api ThreatFrontier.com en 2026-10-01T18:56:36.421Z TensorFold Speeds Up Local LLMs but Leaves Its API Unauthenticated https://test.threatfrontier.com/articles/gemini-4-argon-vs-gpt-6-astra-vs-claude-opus-5-5 ThreatFrontier.com en 2026-10-01T06:02:39.034Z Gemini 4 Argon vs GPT-6 Astra vs Claude Opus 5.5: Is Google's New Model Actually Better? https://test.threatfrontier.com/articles/ling-3-1-flash-vs-glm-5-3-flash-vs-qwen-3-8-flash-next ThreatFrontier.com en 2026-09-30T17:45:07.508Z Ling 3.1 Flash vs GLM 5.3 Flash vs Qwen 3.8 Flash Next: Three Bets on Cheap Agent Models https://test.threatfrontier.com/articles/ling-3-1-flash-ant-group-best-flash-model-yet-cybergym ThreatFrontier.com en 2026-09-30T17:44:31.719Z Ling-3.1-flash Is Ant Group's Best Flash Model Yet, and It Scores 87.9 on CyberGym