Offensive Security Digest

Zero-Day Exploits and Active Threats

• 🔥 Microsoft June 2026 Patch Tuesday: Disclosed three zero-days including RoguePlanet (Defender) and...

ShinyHunters exploited an Oracle zero-day to breach 100 universities, leaking 40 GB from Nottingham and exposing half a million records.

The broader...

PyRIT streamlines agentic AI red teaming by supplying shareable scripts that red teams can directly use to facilitate exploit development and integrate automated test findings into vulnerability reporting.

Attackers hit the Kirki WordPress plugin password-reset flaw with an exploit request just 16 hours after disclosure. Red teamers targeting WordPress should watch for these rapid exploitation windows on unpatched sites.

• Volume overload: Microsoft fixed 206 vulnerabilities including 37-39 Critical and three public zero-days, turning Patch Tuesday into a SOC triage...

CVE-2026-20262 lets credentialed attackers escalate to root on Cisco Catalyst SD-WAN Manager via crafted file uploads. Already exploited in the wild...

Agentjacking exploits MCP trust boundaries to weaponize AI coding agents against developer environments. This creates a fresh attack surface for offensive researchers probing AI-assisted development workflows.

Zscaler's CSO Deepen Desai warns AI is amplifying attacker speed and scale in vulnerability discovery and exploit chaining, not inventing new...

Responsive FileManager allows unauthenticated attackers to upload files of any type and extension without restriction via the dialog.php endpoint. Web app pentesters should prioritize testing this vector for immediate RCE potential.

Continuous agentic pentesting represents a shift from periodic scans or annual tests to ongoing autonomous assessments. The first platform built for...

The May edition of the Advanced In-The-Wild Malware Test evaluates how well solutions protect against living-off-the-land techniques. Red teamers relying on these methods should review the results to understand current defensive effectiveness.

Hi! 👋 Welcome to your Offensive Security Digest.

I haven't found any relevant content yet, but I'm actively tracking exploit dev, red teaming, and...