An active exploitation campaign targeting on-premises corporate mail systems has prompted federal authorities to include a persistent scripting vulnerability in […]
CISA adds Microsoft Exchange Server OWA cross-site scripting flaw to KEV catalog Read More »
A cross-site scripting vulnerability present within legacy corporate mail services has been officially added to the federal inventory of actively
CISA adds on-premises Microsoft Exchange Server spoofing vulnerability to KEV catalog Read More »
A critical authentication bypass vulnerability in software-defined network architecture is under active zero-day exploitation, allowing remote unauthenticated threat groups to
Cisco warns of zero-day exploitation targeting Catalyst SD-WAN peering authentication Read More »
A prominent artificial intelligence research organization has initiated an emergency rotation of code-signing mechanisms after discovering an active developer environment
OpenAI forces certificate rotation following developer compromise via TanStack attack Read More »
A maximum-severity vulnerability in a leading DevOps platform has been proactively remediated in cloud environments, but remains a critical action
Microsoft addresses max-severity CVSS 10.0 information disclosure in Azure DevOps Read More »
A critical SQL injection vulnerability in a popular AI orchestration gateway is being weaponized to steal sensitive provider credentials. This
LiteLLM AI gateway under active SQL injection attack to harvest master API keys Read More »
A critical authentication bypass vulnerability in software-defined networking controllers has been added to the federal list of known exploited threats
CISA mandates immediate remediation for Cisco Catalyst SD-WAN admin bypass Read More »
A sophisticated global espionage operation has been identified utilizing legitimate cloud productivity tools to disguise malicious command and control traffic.
Voldemort malware campaign utilizes Google Sheets for stealthy C2 communication Read More »
A significant increase in automated scanning activity has been observed targeting a critical perimeter vulnerability shortly after official patches were
Palo Alto Networks reports surge in scanning for CVE-2026-0300 following patch release Read More »
A critical remote code execution vulnerability in a popular enterprise collaboration platform is a primary remediation item in the latest
Critical Microsoft SharePoint RCE CVE-2026-23415 targeted in May security rollout Read More »
