VulnCheck says a China-based actor began targeting vulnerable U.S. Rejetto HFS servers on October 1, exploiting CVE-2026-61500 to forge admin sessions. The fix shipped in July as version 3.2.1. Exposed instances that have not updated are reachable now.
Perspective Coverage
4 publishers
- Builder
- Builder 43%
- Operator
- Operator 47%
- Investor
- Investor 10%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+30
- Incentives50
- Confidence60
buildOne report1 publisher HFS leaks the Math.random() state that signs its admin cookies
Rejetto HFS 3.0.0 through 3.2.0 signs session cookies with a Math.random() key, and five leaked PRNG outputs let an attacker forge an admin session. Exploitation began on October 1, and version 3.2.1 restores secure key generation.
Reality
- Evidence70
- Adoption72
- Hype gap0
- Incentives50
- Confidence65
Anthropic's Mythos model found a session-forgery path to RCE in Rejetto HFS 3.X
Horizon3 used Anthropic's Mythos model to find CVE-2026-61500, a chain that forges Rejetto HFS admin sessions and reaches remote code execution. The firm expects frontier models to make deeper, less reliable bug classes worth weaponizing at scale.
Reality
- Evidence55
- Adoption15
- Hype gap+30
- Incentives70
- Confidence50
Salesforce post-trained a 120B Nemotron to take over its agents' multi-step reasoning
Koa is a post-trained Nemotron 3 Super running inside Salesforce's trust boundary, taught by reinforcement learning on simulated enterprise workflows. The case the company makes for it rests on consistency and inspectable provenance.
Reality
- Evidence32
- Adoption12
- Hype gap+34
- Incentives90
- Confidence46
Turing Post turns the agent postmortem into a question of where the fix gets stored
Turing Post talked through agent feedback with Salesforce's chief AI scientist at Dreamforce. A correction lands in one of four places: the context, persistent memory, the software around the model, or the weights.
Publishers:turingpost.com
Reality
- Evidence46
- Adoption20
- Hype gap+12
- Incentives62
- Confidence48
Salesforce answers the SaaSpocalypse by putting its permissions model inside Claude and Slack
AIforce opens Salesforce data, workflows and permissions to Claude, Slack and its own Lightning screen with no migration. The adoption figure it gave for Agentforce Coworker counts activations over 35 days.
Reality
- Evidence44
- Adoption41
- Hype gap+33
- Incentives86
- Confidence50
Salesforce puts a model of its own under Agentforce while renting Claude for sales skills
Koa was trained on synthetic data drawn from nearly 30 years of Salesforce deployments and runs inside Agentforce, where Anthropic's Claude now arrives as Claudeforce with 37 prebuilt skills. Admins get two model layers to answer for.
Reality
- Evidence38
- Adoption20
- Hype gap+34
- Incentives80
- Confidence52