https://threatvectr.com/story/a-single-bad-character-can-crash-a-vllm-server-and-the-fix-is-still-pending ThreatVectr en 2026-10-07T16:26:00.257Z A single bad character can crash a vLLM server, and the fix is still pending https://threatvectr.com/story/a-teenage-hacker-a-boeing-spin-off-and-the-oracle-flaw-tying-them-together ThreatVectr en 2026-10-07T14:15:00.835Z A teenage hacker, a Boeing spin-off, and the Oracle flaw tying them together https://threatvectr.com/story/cisas-updated-software-ingredient-list-rules-change-what-knowing-your-code-2 ThreatVectr en 2026-10-07T09:37:00.704Z CISA's Updated Software Ingredient List Rules Change What Knowing Your Code Actually Means https://threatvectr.com/story/one-flaw-eight-atlassian-products-no-login-required ThreatVectr en 2026-10-07T02:21:00.468Z One flaw, eight Atlassian products, no login required https://threatvectr.com/story/inc-ransom-claims-attack-on-us-firm-magnalscom ThreatVectr en 2026-10-07T01:09:00.155Z INC Ransom Claims Attack on US Firm Magnals.com https://threatvectr.com/story/a-fresh-citrix-zero-day-is-already-being-exploited-and-federal-agencies-have ThreatVectr en 2026-10-07T00:26:00.974Z A Fresh Citrix Zero-Day Is Already Being Exploited, and Federal Agencies Have Three Days to Fix It https://threatvectr.com/story/a-98-severity-hole-in-industrial-email-code-puts-water-and-energy-gear-at-risk ThreatVectr en 2026-10-06T16:40:00.607Z A 9.8-severity hole in industrial email code puts water and energy gear at risk https://threatvectr.com/story/two-open-source-bugs-force-patch-for-hitachi-energys-reb500-grid-relay ThreatVectr en 2026-10-06T16:26:00.591Z Two Open-Source Bugs Force Patch for Hitachi Energy's REB500 Grid Relay https://threatvectr.com/story/clingstun-the-linux-backdoor-hiding-in-your-routers-traffic ThreatVectr en 2026-10-06T12:10:00.061Z ClingSTUN: The Linux Backdoor Hiding in Your Router's Traffic https://threatvectr.com/story/langflows-built-in-testing-tool-has-no-password-and-attackers-are-using-it-right ThreatVectr en 2026-10-06T10:39:00.194Z Langflow's Built-In Testing Tool Has No Password and Attackers Are Using It Right Now https://threatvectr.com/story/ai-is-cutting-the-time-criminals-need-to-turn-a-known-bug-into-a-working-attack ThreatVectr en 2026-10-06T08:54:00.616Z AI Is Cutting the Time Criminals Need to Turn a Known Bug Into a Working Attack https://threatvectr.com/story/shinyhunters-claims-a-second-peoplesoft-zero-day-and-oracle-has-said-nothing ThreatVectr en 2026-10-06T01:27:00.720Z ShinyHunters Claims a Second PeopleSoft Zero-Day, and Oracle Has Said Nothing https://threatvectr.com/story/ransomware-group-insomnia-claims-attack-on-medical-records-firm-praxis-emr ThreatVectr en 2026-10-06T01:11:00.497Z Ransomware Group Insomnia Claims Attack on Medical Records Firm Praxis EMR https://threatvectr.com/story/uk-account-hijacking-fraud-up-400percent-as-scammers-sell-fake-tickets-through ThreatVectr en 2026-10-06T00:43:00.237Z UK Account Hijacking Fraud Up 400% as Scammers Sell Fake Tickets Through Victims' Own Profiles