Related Threat Clusters
-
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities.…
8 articles · Updated March 19, 2026 -
Active Exploitation of Microsoft AD FS Vulnerability CVE-2026-56155 Detected
Microsoft has confirmed the active exploitation of CVE-2026-56155, an elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows authenticated local attackers with low…
6 articles · Updated July 15, 2026 -
SonicWall SMA1000 Zero-Day Vulnerability CVE-2025-40602 Exploited
SonicWall has addressed a medium-severity zero-day vulnerability in the SMA1000 Appliance Management Console. This vulnerability is actively being exploited, affecting users of the SonicWall SMA1000. The company has…
37 articles · Updated December 17, 2025 -
Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool
On January 7, 2026, a patch was released for CVE-2026-21858, a maximum severity vulnerability affecting n8n, a workflow automation application. This vulnerability could potentially allow unauthorized access and…
56 articles · Updated January 9, 2026 -
Microsoft January 2026 Patch Tuesday Addresses 114 Vulnerabilities
On January 10, 2026, Microsoft released its Patch Tuesday updates, fixing 114 vulnerabilities, including three classified as zero-day flaws. These updates affect various Microsoft products and are crucial for…
61 articles · Updated January 14, 2026 -
Multiple Vulnerabilities in Microsoft Products Identified
A series of vulnerabilities, collectively identified as CVE-2025, have been reported across various Microsoft products, including Windows, Microsoft Office, and SQL Server. These vulnerabilities allow authorized and…
55 articles · Updated November 11, 2025 -
Multiple Vulnerabilities Identified in Microsoft Products (CVE-2025)
A series of vulnerabilities, collectively identified as CVE-2025, have been reported across various Microsoft products, including Windows, Office, and Azure. These vulnerabilities range from privilege escalation to code…
73 articles · Updated November 21, 2025
Recent Intelligence Reports
- CC-4814 — Digital.Nhs.Uk · July 15, 2026
- CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero — Thehackernews · March 19, 2026
- Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero — Cyberscoop · January 13, 2026
- CVE-2026 — Api.Msrc.Microsoft · January 13, 2026
- CVE-2026 — Api.Msrc.Microsoft · January 13, 2026
- CVE-2026 — Api.Msrc.Microsoft · January 13, 2026
- CVE-2025 — Api.Msrc.Microsoft · December 9, 2025
- CVE-2025 — Api.Msrc.Microsoft · November 11, 2025