On August 5, 2026, Novee Security demonstrated at Black Hat USA that a GitHub issue opened by an account with no write access was enough to execute arbitrary code on the CI runners behind Claude Code, Gemini CLI, and OpenAI Codex repositories. If your CI/CD pipeline executes code from GitHub issues without sandboxing, treat this as a CVE with no patch — yet.

On August 6, 2026, researcher Malcolm Stagg presented NatJack at Black Hat USA — a new attack class that manipulates NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Windows, Linux, and consumer routers are all vulnerable — because the flaw is in the concept of NAT itself, not any one implementation.

Forescout Vedere Labs presented 15 zero-touch provisioning vulnerabilities in TP-Link Omada at Black Hat USA, including 11 CVEs. SMBs deploying network gear via ZTP must patch immediately and rotate all exposed secrets.