Enterprise appsec and AI security teams should prioritize patching critical SaaS and perimeter vulnerabilities, as active exploitation of ServiceNow’s AI platform, WordPress wp2shell, and Palo Alto GlobalProtect is rapidly expanding across large networks. Concurrently, AI agent supply-chain risks are materializing through sandbox escapes in major coding assistants and targeted ransomware encrypting Langflow model assets, while stealthy C2 channels like HollowGraph continue to bypass traditional monitoring. Defenders must accelerate IAST coverage for AI runtimes, validate WAF rules against emerging web exploits, and enforce strict identity boundaries across multi-platform AI deployments.
This legacy edition is awaiting expanded Slugnet analysis and is not yet indexed.
Audio briefing
A spoken version of today’s prioritized cybersecurity briefing.
The audio edition is not available yet.
Threat actors are actively exploiting CVE-2026-6875 in the ServiceNow AI platform to achieve unauthenticated remote code execution, highlighting critical risks in enterprise SaaS and API gateways.
This legacy edition predates Slugnet’s expanded analytical assessment.
The JadePuffer AI agent is deploying custom Go ransomware to encrypt model weights, vector indexes, and training datasets across compromised Langflow servers, directly impacting AI supply-chain integrity.
This legacy edition predates Slugnet’s expanded analytical assessment.
Chained vulnerabilities CVE-2026-60137 and CVE-2026-63030 enable unauthenticated RCE across millions of sites, driving rapid mass scanning that tests WAF bypass capabilities.
This legacy edition predates Slugnet’s expanded analytical assessment.
Two critical flaws in the SonicWall SMA 1000 were actively weaponized to install custom malware and cache credentials well before public patching, underscoring the need for rapid IAST and WAF rule deployment.
This legacy edition predates Slugnet’s expanded analytical assessment.
A critical authentication bypass in PAN-OS GlobalProtect is being leveraged by ransomware operators to breach corporate networks, requiring immediate perimeter security validation.
This legacy edition predates Slugnet’s expanded analytical assessment.
Espionage actors are using hijacked M365 calendars as stealthy command-and-control channels, exfiltrating data via calendar attachments to evade traditional network monitoring.
This legacy edition predates Slugnet’s expanded analytical assessment.
AI coding assistants across major vendors are vulnerable to sandbox escapes where agents write host-executable files, revealing critical gaps in AI runtime security and IAST coverage.
This legacy edition predates Slugnet’s expanded analytical assessment.
A broken access control flaw in Meta’s support infrastructure allowed unauthorized customer data exposure, demonstrating the ongoing value of API and application-layer testing.
This legacy edition predates Slugnet’s expanded analytical assessment.
Hackers exfiltrated extensive HR and financial records from a zero-day exploited in Oracle E-Business Suite, illustrating the persistent threat of unpatched enterprise ERP vulnerabilities.
This legacy edition predates Slugnet’s expanded analytical assessment.
Okta data reveals that most organizations run multiple concurrent AI platforms where agents authenticate using human credentials, creating complex identity and API security challenges for appsec teams.
This legacy edition predates Slugnet’s expanded analytical assessment.