Introducing CAIRN: Frontier tracking for AI-integrated malware

A cairn is a marker left behind on a trail, a deliberately placed stack of stones that helps hikers find their way when the path is unclear. Attackers building AI-integrated malware unintentionally and inevitably leave behind markers of their own: prompt templates, provider endpoints, API keys,...

CVE-2026-59168

creationtimestamp| type| source ---|---|--- 2026-09-21 17:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f2hu4x7pk3zwb 2026-09-22 20:35:08+00:00| published-proof-of-concept| https://github.com/TomWright/dasel/security/advisories/GHSA-cqxr-jxr2-85pq 2026-10-05 04:00:12+00:00|...

CVE-2026-11725

creationtimestamp| type| source ---|---|--- 2026-09-20 22:04:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy7dcwebl2e...

CVE-2026-61818

creationtimestamp| type| source ---|---|--- 2026-09-20 20:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxygpqvmm2b 2026-09-26 06:40:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117335970277189695 2026-09-26 07:00:03+00:00| seen|...

CVE-2026-82887

creationtimestamp| type| source ---|---|--- 2026-09-20 03:03:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7kw4avo2m...

CVE-2026-92404

creationtimestamp| type| source ---|---|--- 2026-09-19 17:03:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvv5yq42gi2m...

CVE-2026-84750

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117297592669715483 2026-09-19 12:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvun3mktk324...

CVE-2026-92970

creationtimestamp| type| source ---|---|--- 2026-09-19 05:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtw5uvoud2f...

CVE-2026-63447

creationtimestamp| type| source ---|---|--- 2026-09-18 23:02:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvtbnd75j723 2026-09-24 09:10:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117325234281863849 2026-09-24 09:30:04+00:00| seen|...

CVE-2026-90173

creationtimestamp| type| source ---|---|--- 2026-09-18 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvsrtl6ebs2g...

CVE-2026-89473

creationtimestamp| type| source ---|---|--- 2026-09-18 16:00:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117292872600066199 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-79551

creationtimestamp| type| source ---|---|--- 2026-09-18 04:00:13+00:00| seen| Telegram/P5aaBxBg5fY1VZGTEsJ6wFdp3qVI9fNNhMWOCqsSdZd8hc 2026-09-19 00:00:13+00:00| published-proof-of-concept| Telegram/P5aaBxBg5fY1VZGTEsJ6wFdp3qVI9fNNhMWOCqsSdZd8hc...

CVE-2026-54670

creationtimestamp| type| source ---|---|--- 2026-09-17 23:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4mzuzc24 2026-09-18 00:07:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqusonzzo2t 2026-09-18 01:40:06+00:00| seen|...

Incorrect Implementation of Authentication Algorithm

Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to improper validation in the SCRAM authentication process. An attacker can intercept authentication handshakes and obtain the client proof by injecting a crafted...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

CVE-2026-82870

creationtimestamp| type| source ---|---|--- 2026-09-17 19:16:21+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvqejav75j2w...

CVE-2026-91826

creationtimestamp| type| source ---|---|--- 2026-09-17 16:06:53+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvpzwhigi62w...

CVE-2026-91017

creationtimestamp| type| source ---|---|--- 2026-09-17 07:17:52+00:00| seen| https://bsky.app/profile/suriq.io/post/3mvp4ehrfvs2f 2026-09-17 09:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ifwcnqt24gcht...

Linux Distros Unpatched Vulnerability : CVE-2026-19607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a...

CVE-2026-76423

creationtimestamp| type| source ---|---|--- 2026-09-16 22:10:02+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvo5qv7n5x2f 2026-09-16 22:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvo7gn7tfi2b 2026-09-17 12:15:06+00:00| seen|...