<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>0dayNews — AI &amp; ML Platforms</title><description>Security vulnerabilities in AI and machine learning platforms — LLM workflow builders (Langflow), business-intelligence tools (Metabase), and AI agent infrastructure. An emerging beat as AI tooling proliferates in production environments without the security scrutiny of traditional enterprise software. Combined article + CVE feed for the AI &amp; ML Platforms beat.</description><link>https://0daynews.com/</link><language>en-us</language><item><title>Metabase Patches CVSS 10 Zero-Day Under Active Exploit</title><link>https://0daynews.com/articles/2026-08-10-metabase-zero-day-patched/</link><guid isPermaLink="true">https://0daynews.com/articles/2026-08-10-metabase-zero-day-patched/</guid><description>Metabase has released a patch for the max-severity unauthenticated SQL injection zero-day confirmed in active exploitation since August 8. Update now. No CVE assigned yet.</description><pubDate>Mon, 10 Aug 2026 13:00:00 GMT</pubDate><category>AI &amp; ML Platforms</category><category>article</category></item><item><title>Metabase Zero-Day: CVSS 10 Exploited in the Wild</title><link>https://0daynews.com/articles/2026-08-10-metabase-cvss10-zero-day-exploited/</link><guid isPermaLink="true">https://0daynews.com/articles/2026-08-10-metabase-cvss10-zero-day-exploited/</guid><description>Unauthenticated SQL injection in Metabase BI gives attackers admin access. Exploitation confirmed, no CVE assigned. Take your instance offline if it&apos;s reachable from untrusted networks.</description><pubDate>Mon, 10 Aug 2026 02:00:00 GMT</pubDate><category>AI &amp; ML Platforms</category><category>article</category></item><item><title>ESET Report: Malicious AI Skills, Record Quishing in H1 2026</title><link>https://0daynews.com/articles/2026-08-02-eset-malicious-ai-skills-quishing-h1-2026/</link><guid isPermaLink="true">https://0daynews.com/articles/2026-08-02-eset-malicious-ai-skills-quishing-h1-2026/</guid><description>ESET&apos;s mid-year threat report tracks attackers weaponizing AI platform skills, record QR phishing volume, ClickFix escalation, and ransomware tooling built to silence endpoint defenses.</description><pubDate>Sun, 02 Aug 2026 06:00:00 GMT</pubDate><category>AI &amp; ML Platforms</category><category>article</category></item></channel></rss>