Iron Man & YamStore: Powering a Global Phishing-as-a-Service Ecosystem 2026-10-14 75 True Session Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations 2026-10-01 75 True CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation 2026-09-11 92 True CVE-2026-65400: macOS Screen Sharing Authentication Bypass Under Active Exploitation 2026-08-25 90 True Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding 2026-08-18 88 True The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action 2026-08-14 93 True Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access 2026-08-10 95 True ExfilSquad Targets New Victims, Shares Data via Torrents 2026-08-07 78 True CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator 2026-08-06 95 True Inside OWAReaper: How CVE-2026-42897 Enables Persistent Exchange Mailbox Compromise 2026-08-02 90 True From WSProxy to Root: INC ransomware and SonicWall SMA Exploit Chain 2026-08-01 95 True When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents 2026-07-30 85 True Exploiting Langflow's validate_code() Endpoint for Remote Code Execution 2026-07-29 95 True From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks 2026-07-18 88 True CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE 2026-07-06 95 True Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise 2026-06-16 85 True CVE-2026-20253: Splunk Enterprise Pre-Authentication Remote Code Execution 2026-06-16 90 True The Anubis Ransomware Attack on the Adriatic Port Authority 2026-06-11 80 True Silent Ransom Group (SRG): Uncovering DNS Fast Flux Infrastructure 2026-06-05 78 True CVE-2026-20182: Unauthenticated Cisco SD-WAN Control-Plane Compromise via vHub Authentication Bypass 2026-05-18 95 True Mini Shai-Hulud: A Cross-Ecosystem Supply Chain Attack on PyTorch Lightning & Intercom Client 2026-05-09 90 True Iranian Proxy Networks in Latin America Post-Maduro: IRGC 2026-05-05 70 True CVE-2026-25874: Hugging Face LeRobot Unauthenticated RCE via Pickle Deserialization 2026-04-27 90 True Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis 2026-04-22 85 True Marimo Pre-Auth RCE via Unauthenticated WebSocket Terminal (CVE-2026-39987) 2026-04-16 90 True GEOINT in the Iran War: Targeting, Intelligence, and the Battle for Information Access 2026-04-14 85 True Spring AI SpEL Injection: From Vector Search to Remote Code Execution (CVE-2026-22738) 2026-04-12 78 True CVE-2026-25769: Critical Remote Code Execution in Wazuh via Unsafe Deserialization 2026-04-08 90 True Supply Chain Malware Alert: plain-crypto-js Compromises Axios Packages 2026-04-04 90 True Pro-Iranian Nasir Security is Targeting The Energy Sector in the Middle East 2026-03-23 65 True 
