Executive Summary
A weekly recap covering WordPress RCE, SonicWall zero-days, attacks on AI services and a SharePoint zero-day.
What Happened
A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs were new. Others were already being used before defenders had time to patch. Here is the full
Vulnerability / Attack Technique
Multiple, including attacks on AI services
Technical Mechanism
The summary lists themes.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI services are now regular targets.
Recommended Controls
- Review the individual advisories
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/weekly-recap-wordpress-rce-sonicwall-0.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.