T1059 - Command and Scripting Interpreter

Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Red Heron Exploits Gitea RCE Flaw in Multinational Campaign

Critical WordPress Vulnerability CVE-2026-87902 Exploited Within Hours of Disclosure

Critical Vulnerabilities in AhsayCBS Allow Remote Code Execution

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Critical Zero-Day Exploits in Citrix NetScaler Confirmed by CISA

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

Critical RCE Vulnerability in Zimbra Exploited by Attackers

CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws

Chinese Hackers Exploit Zyxel Switch Vulnerability CVE-2026-7273

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway

Critical FortiMail Vulnerability Actively Exploited in the Wild

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

North Korean Hackers Deploy Mac Backdoors via Fake Job Tests Targeting IT Firms

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

Critical RCE Vulnerability in Langflow Exposed

Critical Flaw in Collabora's CODE Server Backdoors Nextcloud Servers

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment

Critical Command Injection Vulnerability in Deno Versions 2.7.0 to 2.9.7

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks

Pre-Auth RCE Vulnerability in Marimo Exposed

Critical Vulnerability in Issabel Framework Allows Remote Code Execution

Critical Vulnerabilities Discovered in Splunk AI Toolkit

Critical Vulnerabilities in Paperclip AI Platform Enable Unauthenticated Command Execution

Critical RCE Vulnerability in Langflow's Code Validation Endpoint

Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access

Critical OS Command Injection Vulnerability in wg-easy 15.3.0 Disclosed

Critical SQL Injection Vulnerability Discovered in ReadyEcommerce (CVE-2026-63106)

Critical Cisco Secure Email Gateway Vulnerability Exploited

Critical Authentication Bypass Vulnerability in AWS Loom Exposed

Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

Critical CVE-2026-4769 Vulnerability in WAGO Devices Exposes Systems to Remote Attacks

APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor

Marimo Oss Python Notebook Rce From Disclosure To Exploitation In Under 10 Hours

GHSA 2679 6mx9 H9xc

BeyondTrust zero

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

CVE-2026-39987: Marimo Remote Code Execution Vulnerability

Mandiant attributes the attacks

SPIP odt2spip Plugin: Authenticated Command Injection via Uploaded Document Filename

AdFection: How online ads became a vector for government spyware

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

SiteGuard WAF Flaw CVE-2026-106931 Exploited in Attacks

More Critical Bugs In Adobe Experience Manager Pre Auth Rce

What Is Ai Web App Pentesting

Fake CAPTCHAs are tricking users into running malware on their own devices

18 of the 24 CVEs in curl's latest release

500 previously unknown vulnerabilities assigned CVEs

Cisco warns of actively exploited Secure Email Gateway flaw

CikaBika Bot RAT Uses Discord for C&C

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

Attackers exploit root vulnerability in Cisco Secure Email Gateway

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco Warns of Exploited Secure Email Gateway Vulnerability

CVE-2026-105133 and CVE-2026-105134

GHSA G3vx 3m76 Fghh

Richdocumentscode Issues 354

Claroty says Claude reproduced Danfoss flaws in about 28 minutes

Cisco Patches Exploited Email Gateway Zero-Day That Allows Root-Level Access

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora's Built

Cisco patches new Secure Email Gateway zero

CVE Alert: CVE-2026-104085 – odt2spip

6 Limits of AI Ad

175,000 exposed Ollama hosts worldwide

4K3RCM7q9qslk2ZPIwf ZJs8Qev5

ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads

Hackers abuse the Ivanti Connect Secure bug to gain access without accounts

Fake WatchGuard VPN site steals credentials, then serves the genuine signed client

Security Advisory Bulletin 070

CVE-2026

Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

Ivanti VPN Zero-Day CVE-2026-104935: CVSS 8.6, Root Open