Related Threat Clusters
-
Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation
CISA has warned of ongoing attacks exploiting the CVE-2008-4128 vulnerability in Cisco IOS 12.4, a cross-site request forgery flaw. This vulnerability, which has been known since 2008, allows attackers to execute…
5 articles · Updated July 14, 2026 -
Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors
The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed…
23 articles · Updated August 8, 2026 -
Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access
A critical vulnerability in NASA's AMMOS Instrument Toolkit (AIT-GUI) software, tracked as GHSA-p9r8-2q67-fp86, allows unauthenticated attackers to issue commands to spacecraft and execute scripts. The flaw affects…
7 articles · Updated August 20, 2026 -
Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…
76 articles · Updated July 13, 2026 -
Critical Authlib Vulnerabilities Discovered in Ubuntu Affecting JWT and CSRF
Multiple vulnerabilities were identified in the Authlib library used in Ubuntu systems, specifically affecting versions 24.04 LTS and 26.04 LTS. Discovered by researchers Jay Neiva, Mauro Carrillo, and Johnny Deuss,…
2 articles · Updated July 16, 2026 -
Microsoft Issues Critical Security Patches for August 2026
On August 12, 2026, Microsoft released security patches addressing multiple critical vulnerabilities across its software products. The vulnerabilities include elevation of privilege flaws in Microsoft Teams, Azure SQL…
2 articles · Updated August 12, 2026 -
Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats
Recent research from Darktrace reveals the evolution of Chinese-nexus cyber operations over the past two decades, highlighting a shift from high-volume attacks to more strategic, identity-centric intrusions. This change…
281 articles · Updated April 2, 2026 -
Critical GitLab Vulnerability Allows Unauthenticated Data Deletion
GitLab released an emergency patch on August 17, 2026, for a critical vulnerability tracked as CVE-2026-19478. This flaw allows unauthenticated attackers to remotely modify or delete public projects and user data…
30 articles · Updated August 18, 2026 -
Critical XSS Vulnerability in Pretalx Conference Platform Exposed
A critical stored XSS vulnerability, CVE-2026-41241, has been discovered in the Pretalx conference management platform. This flaw allows registered users to execute malicious scripts that can compromise organizer…
6 articles · Updated May 28, 2026 -
Critical Vulnerabilities Discovered in Jenkins Plugins
Two significant vulnerabilities have been identified in Jenkins plugins, CVE-2026-48922 and CVE-2026-48925. The Jenkins Credentials Binding Plugin allows attackers to write files to arbitrary locations, potentially…
2 articles · Updated May 28, 2026
Recent Intelligence Reports
- Falla crítica en software de NASA/JPL permite comandar naves espaciales sin autenticación — Ciberseguridadlatam · August 23, 2026
- NASA ground control software vulnerability could allow spacecraft access — Feeds.Feedburner · August 21, 2026
- Security Fixes Updates And Advisories — trueconf.com · August 21, 2026
- Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects — Thecyberexpress · August 19, 2026
- GitLab ships out-of-band fix for CVSS 9.4 GraphQL bug — Aiweekly.Co · August 18, 2026
- Critical GitLab Zero — Darkreading · August 18, 2026
- Critical GitLab flaw allows attackers to delete and modify public repos — Csoonline · August 18, 2026
- GitLab Ships Emergency Patch for Critical CVSS 9.4 GraphQL Flaw That Lets ... — Aiweekly.Co · August 18, 2026