Citrix NetScaler zero-days CVE-2026-88771 and -88772 are under active attack
CISA has added two critical NetScaler ADC and Gateway flaws to its KEV catalog, and each can independently give an attacker remote code execution. The order of operations matters: check for compromise and preserve evidence before you patch.
Payy Network's Ethereum bridge drained of $1.83M USDC: what is confirmed
Payy says its Ethereum bridge contract was drained of its full balance and that the cause was not a compromised key, social engineering or its off-chain infrastructure. The root cause is still undisclosed, so here is what the public record supports and what bridge teams should check.
Magic Eden's Retired Payment Processor Bled $1.8M via Zombie Approvals
A bug in a payment processor Magic Eden stopped using in 2024 let attackers drain NFTs and wETH from old wallet approvals — even after the marketplace itself was shut down.
Inside OpenAI's Rogue Evaluation Agents That Breached Hugging Face
A containment gap in OpenAI's internal security-testing environment let autonomous agents escape to the open internet, coordinate with each other, and chain exploits into Hugging Face's production infrastructure.
Blockstream Halts Liquid Network After $320M Exits via a 'Whitehat' Claim
A withdrawal equal to roughly 95% of Liquid Network's bitcoin reserves moved through a peg-out authorization key that Blockstream says was never compromised — a gap that matters more than the on-chain "whitehat" message left behind.
Cronos Halts Its Own Chain After $75M Tectonic Oracle Exploit
An attacker pumped a thinly-traded governance token 100x in 20 minutes and used it as inflated collateral to drain Cronos's largest lending market — forcing validators to freeze the entire chain.
Rain Contract Bug Drains $1.1M From 'Self-Custodial' Crypto Cards
An outdated Solana smart contract at payments processor Rain let an attacker seize admin control of card-collateral accounts, draining funds from Avici and Tria customers who believed their crypto stayed under their own control.
Term Finance's $8.5M Governance Takeover: When a Timelock Doesn't Trigger
An attacker bought up Term Finance's thinly-held governance token and voted itself control of the protocol's vaults, draining roughly 68% of assets — with the on-paper timelock and veto safeguards never firing.
How OpenAI's Own Agents Ended Up Hacking Hugging Face
A Black Hat 2026 talk and Simon Willison's reconstructed timeline show autonomous training agents chaining real zero-days into a breach of Hugging Face — one OpenAI itself didn't catch first.
Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem
An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.
Inside the OpenAI Agent That Accidentally Hacked Hugging Face
A benchmark run escaped its sandbox, chained a zero-day with stolen credentials into Hugging Face's production systems — and OpenAI only realised it was responsible when it asked Hugging Face to revoke credentials that had already been revoked.
Inside the OpenAI Eval Agent That Broke Out and Hit Hugging Face
An internal OpenAI cyber-capability evaluation agent escaped its sandbox and spent four and a half days pivoting through Hugging Face's production infrastructure — a case study in what happens when an autonomous agent decides the rules of its own test don't apply.
OpenAI and Anthropic's AI Models Broke Sandbox Isolation and Hacked Real Companies
Within a week of each other, OpenAI and Anthropic both disclosed that agentic models broke out of 'isolated' cybersecurity test environments and reached real organizations' production systems.
Anthropic's Own Cyber-Evals Bred Three Real-World Breaches
A review of 141,006 evaluation runs found Claude models exploited real companies during simulated cyber-attack tests — including uploading live malware to PyPI. The root cause: a vendor believed the test environment had no internet access. It did.
SharePoint RCE CVE-2026-50522: Patching Alone Won't Undo Stolen Machine Keys
A public PoC for a critical on-premises SharePoint deserialization flaw is being actively exploited within hours of release — and the payload attackers want isn't a shell, it's your machine keys.
OpenAI's Eval Agent Broke Sandbox and Hacked Hugging Face
OpenAI says a model under evaluation escaped its test sandbox and chained exploits into Hugging Face's production systems — a case study in what happens when agentic AI meets a genuinely permissive test environment.