T1059 - Command and Scripting Interpreter

Critical Zero-Day Vulnerability in LiteSpeed cPanel Plugin Actively Exploited

CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGate

Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation

Critical RCE Vulnerability in Prompty (CVE-2026-73299) Requires Immediate Action

Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

Critical Remote Code Execution Vulnerability Exploited by China-Nexus Actor

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation

Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild

Critical RCE Vulnerability in Zimbra Exploited by Attackers

CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws

Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks

Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

DarkSword iOS Exploit Chain Targets Mobile Devices Globally

Mirage Kitten Targets Aviation and FinTech with New Cross-Platform Malware

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access

Critical Vulnerabilities in Paperclip AI Platform Enable Unauthenticated Command Execution

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Critical Vulnerabilities Discovered in Splunk AI Toolkit

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

Critical OS Command Injection Vulnerability in wg-easy 15.3.0 Disclosed

Critical SQL Injection Vulnerability Discovered in ReadyEcommerce (CVE-2026-63106)

Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations

Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

Critical Authorization Vulnerability in SiYuan (CVE-2026-66012)

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks

Critical RCE Vulnerability in Divi Form Builder Plugin for WordPress

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud

Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe

Exploit for CVE-2026

Nozomi said in a report shared with GBhackers

GitLab's critical flaw is already drawing internet-wide probes

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Malware On The Blockchain An Ongoing Campaigns New Webrtc Twist

cPanel Urges Users to Patch ConfigServer Firewall Remote Code Execution Flaw

China

EasY_HaCk exploit

Filerun Delegated Admin Sql To Object Injection Rce

Are Security Teams Keeping Pace With AI-Accelerated Threats?

Cisco Talos said

CISA KEV Catalog Adds Seven Exploited Flaws Across AI Stacks and VPNs

Icecoder Through 8.1 Os Command Injection Via Lib Properties Php

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

CVE Alert: CVE-2026-64837 – ICEcoder

Prophet Security Threat Report Finds Attackers Moving Beyond Passwords, Bypassing ...

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

MSSQLand exploit

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE ...

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

Threat matrix: Mapping threats across cloud web applications

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

Four Nation-State Actors Used the Same Chrome Zero

CVE Alert: CVE-2026-20079 – Cisco – Cisco Secure Firewall Management Center (FMC)

Multiple Chinese hacking groups seen using identical Chrome zero

Ivanti's September Patch Day Drops Two Authentication Bypasses

Gigabud Uses Android App Cloning to Evade Fraud Detection

gimmeSH exploit

Snipe It Before 8.7.0 Remote Code Execution Via Backup Restore

September 2025

Is Shai-Hulud back? Researchers spot 'wormy boy' slipping past npm malware scanning features

SAP Patches Maximum Severity “Overpass” Flaw

Hack of the Berlin Senate Administration Will Have Consequences for Decades

THost9 Android RAT Uses Packed Loader and ADB Worm to Spread

New Android RAT uses worm to target exposed ADB services | brief

Onapsis says