#chained

Ivanti patches two more Connect Secure zero-days chained in attacks

Nov 2, 2026 // 12:36

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least […]

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

Oct 29, 2026 // 17:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with […]

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

Oct 28, 2026 // 18:29

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said […]

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Sep 19, 2026 // 14:51

Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of […]

Artifactory flaws chained in attacks deploying backdoor malware

Sep 12, 2026 // 01:37

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted […]

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

Sep 7, 2026 // 14:22

A TantoSec proof-of-concept turns an AES-CBC “padding oracle” in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in […]