https://spbavarva.github.io/0day.digest/0day.digest is a daily journal tracking AI launches, supply chain attacks, CVEs, breaches, and emerging threats — short signal items plus the occasional deep dive. 2026-08-27T11:58:52-07:00 Sneh Bavarva https://spbavarva.github.io/0day.digest/ Jekyll © 2026 Sneh Bavarva /0day.digest/assets/img/favicons/favicon.ico /0day.digest/assets/img/favicons/favicon-96x96.png 2026-08-27T10:43:24-07:00 2026-08-27T10:43:24-07:00 https://spbavarva.github.io/0day.digest/posts/openai-anthropic-google-100-companies-rogue-ai/ Sneh Bavarva

More than 100 tech companies and AI startups, including OpenAI, Anthropic, and Google, have jointly called for action to defend against what they describe as a new generation of AI-related cyber threats. The announcement coincides with the group promoting a proposed solution, though specifics of the proposal were not detailed in the source summary.

2026-08-27T09:31:53-07:00 2026-08-27T09:31:53-07:00 https://spbavarva.github.io/0day.digest/posts/papercut-ng-mf-zero-day-exploited/ Sneh Bavarva

PaperCut is warning that a vulnerability affecting all versions of its PaperCut NG and PaperCut MF print management software is being actively exploited in zero-day attacks. No CVE identifier was included in the initial advisory summary, and technical details of the exploitation mechanism have not been made public. Organizations running PaperCut NG or MF should treat this as an active threat a...

2026-08-27T09:20:05-07:00 2026-08-27T09:20:05-07:00 https://spbavarva.github.io/0day.digest/posts/aws-bedrock-guardrails-tool-interactions-strands-agents/ Sneh Bavarva

AWS published guidance on extending Amazon Bedrock Guardrails coverage beyond the model boundary to AI agent tool interactions, using the Strands Agents SDK. Bedrock Guardrails alone don’t cover data flowing through tool calls, external data fetches, or other system communication that agents perform. AWS describes three validation checkpoints practitioners can build to close that coverage gap.

2026-08-27T09:11:32-07:00 2026-08-27T09:11:32-07:00 https://spbavarva.github.io/0day.digest/posts/gemini-omni-1-1-flash-launch/ Sneh Bavarva

Google DeepMind released Gemini Omni 1.1 Flash, a model update described as giving developers more control when building with it. Further capability and benchmark detail was not included in the source summary.

2026-08-27T08:13:00-07:00 2026-08-27T08:13:00-07:00 https://spbavarva.github.io/0day.digest/posts/nextjs-critical-avif-windows-rce-cve-2026-75604/ Sneh Bavarva

Vercel has released patches for two critical-severity vulnerabilities in the Next.js web framework, both allowing unauthenticated remote code execution. One is exploitable via specially crafted AVIF image files; the other is a path traversal flaw, tracked as CVE-2026-75604, affecting servers that run on a Windows filesystem. Teams running Next.js in production, particularly on Windows hosts, s...