A previously undocumented threat actor is leveraging social engineering via internal collaboration platforms to bypass traditional email security perimeters. This
UNC6692 impersonates IT help desk via Microsoft Teams to deploy SNOW malware Read More »
Two critical vulnerabilities in a popular cloud migration and backup utility are being exploited to execute unauthorized commands on backup
Rclone unauthenticated RCE vulnerabilities targeted in mass cloud harvesting campaign Read More »
A critical Server-Side Request Forgery vulnerability in a popular toolkit for deploying large language models is being actively weaponized to
LMDeploy SSRF vulnerability CVE-2026-33626 exploited within 13 hours of disclosure Read More »
A critical path traversal vulnerability in a widely used enterprise display management server has been added to the federal list
CISA adds Samsung MagicINFO path traversal flaw to KEV following active abuse Read More »
A critical pre-authentication remote code execution vulnerability in a popular AI orchestration framework is now being exploited in the wild.
CISA adds critical Marimo AI notebook pre-auth RCE to KEV catalog Read More »
A functional proof-of-concept exploit has been published for a critical command execution vulnerability in your automated threat analysis infrastructure. This
Public PoC exploit released for critical Fortinet FortiSandbox RCE vulnerability Read More »
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign achieves industrial scale with NEXUS Listener command center Read More »
Attackers are industrializing the exploitation of a critical privilege escalation flaw in the Windows security subsystem to gain SYSTEM-level access
Microsoft Defender BlueHammer privilege escalation exploitation enters high-volume phase Read More »
A new ransomware threat actor has emerged, specifically targeting Managed Service Providers to deliver encryption payloads to dozens of downstream
New The Gentlemen ransomware group targets MSPs via Bomgar RMM exploitation Read More »
A critical pre-authentication remote code execution vulnerability in a popular AI orchestration framework is now being exploited in the wild.
CISA adds critical Marimo AI notebook pre-auth RCE to KEV catalog Read More »
