PAN-OS RCE, cURL bug, Hugging Face tokenizer tampering and new attack vectors

Colleagues, I want to draw attention to recent cybersecurity developments.

- Palo Alto released fixes for CVE-2026-0300: the PAN‑OS flaw was exploited for RCE and backdoor deployment.
- Anthropic Mythos scanned cURL: one low-level bug confirmed; other findings were false positives—AI analysis needs verification.
- A “tokenizer tampering” technique against Hugging Face was demonstrated: altering tokenizer.json can influence model outputs and exfiltrate data.
- New vectors—GhostLock (SMB locking without encryption) and a rise in simplified supply‑chain attack techniques—are emerging.

Why it matters: attackers increasingly leverage trusted tools—patch, audit permissions and backups.

How are you addressing these combined risks in your organization?

#cybersecurity #incidentresponse #supplychain #AIsecurity