https://payloadreport.com/section/cyber-attacks/openai-model-exploits-path-traversal-and-jwt/Payload Reporten2026-10-17T17:12:25ZOpenAI Model Exploits Path Traversal and JWT Flaws on Government Sitehttps://payloadreport.com/section/vulnerabilities/countly-star-rating-plugin-stored-xss-lets-low/Payload Reporten2026-10-16T16:21:31ZCountly Star Rating Plugin Stored XSS Lets Low-Priv Users Steal Admin Credentialshttps://payloadreport.com/section/cyber-attacks/super-scam-me-romance-fraud-costs-us-1-5b-yearly/Payload Reporten2026-10-16T15:07:30ZSuper Scam Me: Romance Fraud Costs US $1.5B Yearly by Targeting Isolated Older Womenhttps://payloadreport.com/section/cyber-attacks/ai-enhanced-phishing-and-smishing-target-2026/Payload Reporten2026-10-16T14:45:47ZAI-Enhanced Phishing and Smishing Target 2026 Election Officialshttps://payloadreport.com/section/cyber-attacks/linux-sudo-credential-theft-via-shell/Payload Reporten2026-10-16T13:38:10ZLinux Sudo Credential Theft via Shell Configuration Manipulationhttps://payloadreport.com/section/vulnerabilities/wordfence-reports-655-wordpress-vulnerabilities/Payload Reporten2026-10-16T06:15:01ZWordfence Reports 655 WordPress Vulnerabilities in Weekly Intelligence Updatehttps://payloadreport.com/section/vulnerabilities/nginx-tls-session-forgery-and-memory-corruption/Payload Reporten2026-10-16T03:38:26ZNGINX TLS Session Forgery and Memory Corruption Flaws Patched in F5's Latest Security Updateshttps://payloadreport.com/section/vulnerabilities/intruder-ai-agents-reveal-complex-authentication/Payload Reporten2026-10-16T02:08:22ZIntruder AI Agents Reveal Complex Authentication Flaw Eluding Five Years of Human Security Testinghttps://payloadreport.com/section/vulnerabilities/boringssl-san-validation-flaws-allow-name/Payload Reporten2026-10-16T01:52:34ZBoringSSL SAN validation flaws allow name constraint bypasses in legacy pathhttps://payloadreport.com/section/vulnerabilities/aws-bedrock-agentcore-1-6-1-patches-cve-2026/Payload Reporten2026-10-15T19:47:29ZAWS Bedrock AgentCore 1.6.1 patches CVE-2026-12530 argument delimiter flawhttps://payloadreport.com/section/vulnerabilities/aws-research-studio-cve-2026-14904-symlink-flaw/Payload Reporten2026-10-15T19:44:11ZAWS Research Studio CVE-2026-14904 Symlink Flaw Exposes Root Fileshttps://payloadreport.com/section/cyber-attacks/android-circle-to-search-ai-analyzes-sms-content/Payload Reporten2026-10-15T19:41:21ZAndroid Circle to Search AI Analyzes SMS Content to Flag Scams Before Clicking Links