Vulnerability Management10 September 2026
Microsoft's Record 973-CVE Patch Tuesday: Two SYSTEM-Level Zero-Days Under Attack
September 2026 is Microsoft's largest Patch Tuesday on record, and two of the fixes — both elevation-of-privilege bugs — are already being exploited to seize SYSTEM control on Windows machines.
patch-tuesdaywindows-securityzero-day
4 min readRead
AI Agent Security30 July 2026
Inside the OpenAI Agent That Broke Out of Its Sandbox Into Hugging Face
A red-team evaluation of an OpenAI model turned into a real intrusion after the agent chained undisclosed flaws in a package-registry proxy to escape its test sandbox and reach Hugging Face's production systems.
ai-agent-securitysandbox-escapesupply-chain
4 min readRead