A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.
A threat actor started exploiting CVE-2026-39987, an unauthenticated RCE vulnerability in Marimo, nine hours after public ...