BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW
1. Overview Report Title: ARMORY CASTLE Exploits BeyondTrust Source: Google Threat Intelligence Group Publication Date: 2026-10-15 Updated Date: Non…
Architecture
⚑ Report a ProblemLatest Architecture news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
news
opensource
performance
productivity
programming
python
react
security
showdev
softwareengineering
systemdesign
tutorial
typescript
webdev
AI-Assisted OT Lab: Equipment Control in Just Over 16 Minutes from a Breached Perimeter; Robotic Arm Moved in a Separate Test
1. Basic Information Article Title: AI Takes Control of Robotic Arm in 16 Minutes Flat Source: Dark Reading Publication Date: 2026-10-16 Updated Dat…
Supply Chain Sabotage: npm, GPU Telemetry & Korean Bank AI Exploitation
Originally published on satyamrastogi.com Tensorlake npm SDK compromise, exposed NVIDIA GPU monitors, and AI-driven Korean bank breaches reveal syst…
Oracle PeopleSoft CVE-2026-35273: WAF Bypassed via URL Normalization Mismatch to Deploy Web Shells and SIDEEYE
1. Overview Article Title : ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft Source : Google Threat Intelligence Group /…
CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs
1. Basic Information Original Title: CARBONATO: a botnet built around an AI agent Source: ThreatDown Published Date: 2026-09-22 Updated Date: None C…
indexed-btree: npm Supply Chain Malware Executes at Runtime and Uses a Smart Contract on Ethereum Sepolia for C2
1. Basic Information Original Title: npm 'btree' Malware Campaign Affects Millions of Downloads, No Need for Install Script Source: Checkmarx Zero P…
Orkes Conductor CVE-2026-58138: Exploitation Activity Observed Against Unauthenticated Workflow RCE
1. Basic Information Original Title: September 2026 CVE of the Month: The 9.8 Nobody Knows They Are Running (CVE-2026-58138) Source: Empirical Secur…
Agentic Self-Modification: Maintenance AI Retraining, Weight Updating, and Deploying Its Own Model Weights
1. Basic Information Original Title: Agentic Self-Modification in Open-Weights Systems Source: Irregular Publication Date: 2026-09-16 Update Date: N…
GitLab CVE-2026-85706: Active Scanning Targeting Pre-Authentication File Read
1. Basic Information Original Title: GitLab urges users to patch max severity path traversal flaw Source: BleepingComputer, GitLab Publication Date:…
FalconFlank: Privilege Escalation PoC Abusing CrowdStrike Falcon's Macro Removal Process
1. Basic Information Article Title : New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges Publisher : BleepingComputer Publication Date :…
AI Experiment: Porting a PLC Exploit Takes Hours and Hundreds of Dollars
1. Basic Information Article Title : Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars Publisher : SecurityWeek Publicat…
Exploitation of Langflow CVE-2026-0768: From Unauthenticated Root RCE to Secret Theft and Lateral Movement
1. Basic Information Article Title : Critical Langflow Flaw Exploited as Attacks on AI Platform Rise Publisher : Dark Reading Publication Date : Sep…
Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration
1. Basic Information Article Title : JavaScript obfuscation: From party trick to phishing kit Publisher : Cisco Talos Publication Date : 2026-08-27…
Attacks on Water OT: Over 100 Internet-Exposed Systems Targeted in July
1. Overview Title : CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks Source : SecurityWeek Published : 2026-08-26 Origina…
JavaScript Sandbox Escape via Type Confusion in isolated-vm
1. Basic Information Article Name : GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm Publisher : Endor Labs Publication Dat…
Clop's Windchill Web Shell: From Credential Decryption to Design Data Theft Inside the App
Clop's Windchill Web Shell: From Credential Decryption to Design Data Theft Inside the App 1. Basic Information Article Title : Clop Returns with Cu…
Microsoft's AI Defense Research: Generating Detection Test Logs from Attack Procedures
Microsoft's AI Defense Research: Generating Detection Test Logs from Attack Procedures 1. Basic Information Article Title : Accelerating detection e…
CrowdStrike's AI Triage Research: How Well Can AI Automatically Judge SOC Alerts?
CrowdStrike's AI Triage Research: How Well Can AI Automatically Judge SOC Alerts? 1. Basic Information Article Title : Teaching AI to Reason Through…
Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools
Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools 1. Basic Information Se…
Fastjson 1.x CVE-2026-16723: Unauthenticated RCE Targeting Default Spring Boot Fat-Jars
Fastjson 1.x CVE-2026-16723: Unauthenticated RCE Targeting Default Spring Boot Fat-Jars 1. Basic Information Article Title : Unpatched Fastjson Vuln…
Dysphoria: A 200k-Device Botnet Using Blockchain Name Resolution and Infected Device Relays
Dysphoria: A 200k-Device Botnet Using Blockchain Name Resolution and Infected Device Relays 1. Basic Information Article Title : New Dysphoria DDoS…