Between December 2025 and February 2026, a lone attacker used Anthropic's Claude and OpenAI's GPT-4.1 to breach nine Mexican ...
A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.
Nine Mexican government agencies targeted by a single attacker with two AI tools.
CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...