This archive includes all published incident pages. Page 41 of 41.
Each page is intended to help a security team answer three questions quickly: why the issue is AI-relevant, what part of the workflow may be exposed, and what actions should happen first.
Selection criteria and correction policy are documented in Methodology & Editorial Policy.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On September 25, 2025, Cisco released several security advisories addressing 3 vulnerabilities, 2 of which are critical.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On October 15, 2025, F5 disclosed that a sophisticated nation-state actor breached its systems and maintained long-term persistent access into F5's infrastructure.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On October 23, 2025, Microsoft released an out-of-band update to address a critical vulnerability in Windows Server Update Service (WSUS).
Source disclosure: Unknown | Published on Radar: March 4, 2026
On December 17, 2025, Cisco released a security advisory for a critical vulnerability affecting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager products.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On 25 February 2026, Cisco released security advisories addressing multiple high and critical severity vulnerabilities in Cisco Catalyst SD-WAN controllers and Cisco SD-WAN Manager.
Source disclosure: January 6, 2026 | Published on Radar: February 25, 2026
Overview A vulnerability in the Forcepoint One DLP Client allows bypass of the vendor-implemented Python restrictions designed to prevent arbitrary code execution.
Source disclosure: January 5, 2026 | Published on Radar: February 14, 2026
Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the frontend, allowing non-administrator users to view and reuse it.
Source disclosure: December 23, 2025 | Published on Radar: February 14, 2026
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.
Source disclosure: December 19, 2025 | Published on Radar: February 14, 2026
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.