A 17-year-old remote code execution vulnerability in the Microsoft Office Excel engine has been resurfaced for use in modern ransomware
CISA adds legacy Microsoft Office Excel RCE to KEV following ransomware precursor use Read More »
A critical prototype pollution vulnerability in the world most popular PDF reader was weaponized months before its public disclosure. This
Adobe Reader zero-day CVE-2026-34621 confirmed active in wild since November 2025 Read More »
Attackers are actively exploiting a critical spoofing vulnerability in Microsoft SharePoint Server to falsify internal communications and facilitate social engineering
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign exploits Next.js RCE for automated cloud harvesting Read More »
A legacy vulnerability in the Microsoft Visual Basic for Applications engine is being resurfaced by threat actors to achieve unauthorized
Microsoft Visual Basic VBA insecure library loading flaw added to CISA KEV Read More »
Your endpoint management infrastructure is currently being targeted to achieve unauthorized code execution via a critical SQL injection flaw. This
CISA adds critical Fortinet FortiClient EMS SQL injection to KEV catalog Read More »
A critical prototype pollution vulnerability in the world most popular PDF reader has been active in the wild for several
Adobe patches critical Acrobat and Reader zero-day exploited since 2025 Read More »
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Active exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
A critical pre-authentication remote code execution vulnerability in the Marimo reactive notebook framework is currently being exploited to compromise AI
Critical Marimo AI notebook pre-auth RCE vulnerability under active exploitation Read More »
One of the most trusted HTTP client libraries in the JavaScript ecosystem was weaponized by a North Korea-nexus actor to
North Korean UNC1069 attributed to Axios npm supply chain compromise Read More »
