Related Threat Clusters
-
Critical Joomla JCE Vulnerability Under Active Exploitation
A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…
33 articles · Updated June 17, 2026 -
Critical RCE Vulnerability in N-able N-central Requires Immediate Patching
N-able has released Hotfix 4 for its N-central platform to address CVE-2026-86218, a critical remote code execution (RCE) vulnerability rated CVSS 10.0. This flaw allows unauthenticated attackers to execute arbitrary…
31 articles · Updated September 7, 2026 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access
A critical flaw in FreeIPA, tracked as CVE-2026-76578, allows unauthenticated clients to create Kerberos identities and gain administrative privileges. This vulnerability arises from a misconfigured access control rule…
3 articles · Updated September 8, 2026 -
FBI Seizes Iranian Hacktivist Group Websites After Stryker Cyberattack
The FBI has seized two websites linked to the Iranian hacktivist group Handala following their cyberattack on Stryker Corporation, a U.S. medical technology firm. The attack, which occurred on March 11, 2026, involved…
21 articles · Updated March 19, 2026 -
MikroTik RouterOS Vulnerabilities Under Active Exploitation
CERT Polska has identified six critical vulnerabilities in MikroTik RouterOS, with two of them forming an attack chain named MikroTrick. This chain allows attackers to gain full administrative control of devices via SSH…
12 articles · Updated September 6, 2026 -
Malaysian Government Websites Targeted by Cyberattacks Exploiting Joomla Vulnerability
Several Malaysian government agency websites, including the Ministry of Health, were attacked by hackers identified as 'Mushr00w'. The attacks exploited a vulnerability in the Joomla content management system, allowing…
2 articles · Updated June 27, 2026 -
Storm-0501 Cybercrime Group Targets Azure with Ransomware Tactics
Storm-0501, a financially motivated cybercrime group, has been active since 2021 and is known for conducting ransomware operations using various Ransomware-as-a-Service (RaaS) variants. They have recently expanded their…
2 articles · Updated August 17, 2026 -
Italy Extradites Chinese Hacker Xu Zewei to the U.S. for COVID-19 Research Theft
Xu Zewei, a 33-year-old Chinese national, was extradited from Italy to the United States on April 27, 2026, following his arrest in Milan on July 3, 2025. He is accused of participating in cyberattacks directed by the…
51 articles · Updated April 26, 2026 -
Critical WP Maps Pro Vulnerability Exposes 15,000 WordPress Sites to Admin Takeover
A critical vulnerability (CVE-2026-8732) in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create administrator accounts on affected sites. The flaw affects all versions up to 6.1.0 and was…
16 articles · Updated May 31, 2026
Recent Intelligence Reports
- FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials — Thehackernews · September 8, 2026
- CVE-2019 — Sploitus · September 7, 2026
- CVE Alert: CVE-2026-86292 – SourceCodester — Redpacketsecurity · September 7, 2026
- Back-to-back N — Csoonline · September 7, 2026
- N-able N-central CVSS 10.0 Pre — Tech.Yahoo · September 7, 2026
- Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update ... — Cert.Pl · September 6, 2026
- Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities — Thehackernews · September 5, 2026
- AWS publica guía de respuesta a incidentes basada en tres casos reales de compromiso en la nube — Ciberseguridadlatam · September 4, 2026