Related Threat Clusters
-
CISA Warns U.S. After Cyberattack on Poland's Energy Grid Linked to Russian Hackers
A cyberattack targeting Poland's energy grid in December has been linked to a Russian government-affiliated hacking group. The attack affected 30 wind and photovoltaic farms and prompted the Cybersecurity and…
9 articles · Updated February 10, 2026 -
Cisco SD-WAN Zero-Day Exploited by Threat Actor Since 2023
A cyber threat actor has been exploiting a zero-day vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN Controller since 2023. This vulnerability allows unauthenticated remote attackers to bypass authentication and…
104 articles · Updated February 25, 2026 -
Critical RCE Vulnerability in IBM Langflow Under Active Exploitation
IBM Langflow OSS is facing a critical remote code execution (RCE) vulnerability, tracked as CVE-2026-9198, which allows unauthenticated attackers to execute arbitrary code on default deployments. The vulnerability…
14 articles · Updated August 5, 2026 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies
A sophisticated backdoor malware named Firestarter has been discovered on Cisco Firepower devices, attributed to the state-sponsored threat actor UAT-4356. The malware exploits two vulnerabilities, CVE-2025-20333 and…
37 articles · Updated April 23, 2026 -
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
A coordinated cyberattack affected water utilities in over 30 Minnesota communities on July 26 and 27, 2026. Key cities impacted include Plymouth, South St. Paul, Braham, and Maple Plain. The attack targeted…
324 articles · Updated July 27, 2026 -
Critical PX4 Autopilot Vulnerability Allows Drone Control Takeover
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding a critical vulnerability in the PX4 Autopilot system, tracked as CVE-2026-1579, published on March 31, 2026. This…
4 articles · Updated April 2, 2026 -
CISA Alerts on Actively Exploited SQL Injection Vulnerabilities in WordPress
CISA has identified two critical SQL injection vulnerabilities in WordPress Core, CVE-2026-60137 and CVE-2026-63030, as actively exploited in the wild. Both vulnerabilities were published on July 17, 2026, and added to…
2 articles · Updated July 22, 2026 -
CISA Issues Urgent Warning on Actively Exploited LiteSpeed cPanel Plugin Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin, which allows attackers with FTP or web…
5 articles · Updated June 16, 2026 -
CISA Warns of Critical SimpleHelp Authentication Bypass Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical authentication bypass vulnerability in SimpleHelp, tracked as CVE-2026-48558, which is actively being exploited. This flaw…
2 articles · Updated July 2, 2026
Recent Intelligence Reports
- IBM's agentic AI platform is under active attack — Theregister · August 5, 2026
- Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities — Cyberscoop · July 28, 2026
- CISA Warns of WordPress Core SQL Injection Vulnerability Actively Exploited in the Wild — Cybersecuritynews · July 22, 2026
- US cybersecurity agency had no response plan for data breach — Newsbytesapp · July 11, 2026
- CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog — Gbhackers · July 1, 2026
- CISA warns of another cPanel plugin flaw exploited in attacks — Bleepingcomputer · June 16, 2026
- Critical KMW CCTV Flaw Allows Unauthorised Access to Surveillance Feeds — Gbhackers · June 2, 2026
- Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control — Darkreading · May 20, 2026