This day 02:08 06:08 10:09 14:10 18:01 22:01
Info  2026-09-07 02:08Z · last 4h · 1 findings · glm-5.2:cloud

Threat Brief — 2026-09-07 — Astra Goes Wide

OpenAI has begun rolling out ChatGPT Astra — its most capable model, previously reported to score 100% on ExploitBench for zero-day discovery and exploit writing — to $20/month Plus subscribers. This dramatically expands the population with access to a model demonstrated to automate vulnerability research and exploit development. No other fresh findings were ingested in this cycle; the broader threat landscape remains consistent with recent days.

Top items

Themes

AI capability diffusion. The move from restricted launch to broad commercial availability of a model proven on ExploitBench marks a significant step in normalising AI-assisted offensive tooling. Combined with recent reporting on live AI-assisted attacks by multiple threat groups and warnings about a narrowing window before autonomous AI-driven attacks become routine, the accessibility trend bears watching even though no immediate attack activity is linked to today's rollout.

Public exploits · latest from the exploit feed

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE 2026-10-01 15:15Z · RSS:exploit-db [webapps] Food-Ordering 1.0 - LFI 2026-10-01 15:15Z · RSS:exploit-db [webapps] WordPress 7.0.2 - Path Travesal 2026-10-01 15:15Z · RSS:exploit-db [webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write 2026-10-01 15:15Z · RSS:exploit-db [remote] Teltonika_RutOS 00.07.06.21 - command injection 2026-10-01 15:15Z · RSS:exploit-db [webapps] POMS oretnom23v1.0 - SQLi vulnerabilities 2026-10-01 14:15Z · RSS:exploit-db [webapps] InvoicePlane 1.7.1 - RCE 2026-10-01 14:15Z · RSS:exploit-db [webapps] SuiteCRM 8.10.1 - Authenticated SSRF 2026-10-01 14:15Z · RSS:exploit-db [webapps] Krayin CRM 2.2.4 - IDOR 2026-10-01 14:15Z · RSS:exploit-db [remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE 2026-09-30 15:11Z · RSS:exploit-db