Related Threat Clusters
-
Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems
In July 2026, several critical vulnerabilities were exploited, impacting SonicWall SMA1000 appliances and SharePoint servers. Two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, were discovered in SonicWall…
2 articles · Updated July 28, 2026 -
Microsoft March 2026 Patch Tuesday Addresses 79 Vulnerabilities, Including Zero-Days
On March 10, 2026, Microsoft released its Patch Tuesday updates, fixing 79 vulnerabilities, including two zero-day flaws. The updates address critical vulnerabilities across various products, with one zero-day actively…
51 articles · Updated March 10, 2026 -
Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
57 articles · Updated June 9, 2026 -
Adobe and Microsoft June 2026 Security Updates Address Critical Vulnerabilities
In June 2026, Adobe and Microsoft released significant security updates addressing numerous vulnerabilities. Adobe's update included 11 bulletins covering 123 CVEs, with critical vulnerabilities in Adobe Campaign…
4 articles · Updated June 10, 2026 -
Malicious Browser Add-Ons Exploit AI Platform Users
Malicious browser add-ons are targeting users of popular AI platforms such as ChatGPT, Claude, Copilot, Gemini, and DeepSeek. These extensions masquerade as helpful tools but are actually harvesting personal data and…
2 articles · Updated June 5, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1438 articles · Updated February 9, 2026 -
AI-Generated Bug Reports Overwhelm Bug Bounty Programs
Bug bounty programs are facing a significant surge in low-quality AI-generated vulnerability reports, leading some companies to suspend their initiatives. Reports submitted through platforms like Bugcrowd have…
16 articles · Updated May 18, 2026 -
New GitHub Exploit Allows AI Coding Agents to Execute Malicious Payloads
Researchers from Mozilla's 0DIN have demonstrated a new attack vector that allows AI coding agents, specifically Anthropic's Claude Code, to execute malicious payloads from seemingly benign GitHub repositories. The…
67 articles · Updated June 28, 2026 -
SonicWall SMA1000 Zero-Day Vulnerability CVE-2025-40602 Exploited
SonicWall has addressed a medium-severity zero-day vulnerability in the SMA1000 Appliance Management Console. This vulnerability is actively being exploited, affecting users of the SonicWall SMA1000. The company has…
37 articles · Updated December 17, 2025 -
CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities
Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses,…
10 articles · Updated August 18, 2026
Recent Intelligence Reports
- Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it — Csoonline · August 19, 2026
- 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture — Darkreading · August 18, 2026
- Copilot tricked into telling reseachers how to hack itself — Theregister · August 18, 2026
- Tracker — www.globenewswire.com · July 29, 2026
- >> Read this brief on krypteiasec.com — krypteiasec.com · July 29, 2026
- Daily Threat Brief: July 27, 2026 — Buttondown · July 28, 2026
- GitLost - One word is all it takes to make GitHub's AI agent leak your private repos — Korben.Info · July 8, 2026
- GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat — Reddit · July 7, 2026