Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network
2026-06-18T13:24:34Z•42343d54bf0a27e25dc159d06c7245d3d3d8370d425520ee1dc1953ff6152434
ai-securityandroid-trojanclipper-campaignfortinetjceknown-exploited-vulnerabilitymalicious-pluginsmalwarenpmpci-dsspersistencepickles-in-the-middleprivilege-escalationsupply-chaintailscalethird-party-scriptsvertex-aizero-day
What happened
Collection of The Hacker News alerts covering multiple high-risk issues: Microsoft confirmed a Defender privilege-escalation zero-day (RoguePlanet) assigned CVE-2026-50656 (CVSS 7.8) with a patch in development; CISA added a maximum-severity Joomla JCE flaw (CVE-2026-48907, CVSS 10.0) to its KEV catalog with evidence of active exploitation; and multiple Fortinet FortiSandbox flaws (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) are being exploited in the wild. Additional notable incidents include a large npm supply-chain compromise of @mastra packages, malicious JetBrains Marketplace plugins盗
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 42343d54bf0a27e25dc159d06c7245d3d3d8370d425520ee1dc1953ff6152434
- Enrichment time
- 2026-06-18T13:24:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.