 | How DPRK’s Contagious Interview Campaign Targets Developers | 2026-06-30 | True | | True | | |
| Klue Supply Chain Compromise and CRM Data Exfiltration Incident Advisory | 2026-06-19 | True | | True | | |
| Critical Vulnerabilities in Ivanti Sentry | 2026-06-10 | True | | True | | |
| Check Point VPN Authentication Bypass Under Active Exploitation | 2026-06-08 | True | | True | | |
| Windows Netlogon stack buffer overflow | 2026-06-02 | True | | True | | |
| Ivanti EPMM CVE-2026-6973 Allows RCE with Admin Credentials, Under Active Exploitation | 2026-05-07 | True | | True | | |
| Widespread DAEMON Tools Supply Chain Attack Enables Targeted Follow-on | 2026-05-05 | True | | True | | |
| FortiClientEMS 7.4.4: Critical SQL Injection Flaw Exploited in the Wild | 2026-04-28 | True | | True | | |
| Critical Vulnerability in Fortinet FortiClient EMS | 2026-04-07 | True | | True | | |
| F5 BigIP APM: Remote Code Execution | 2026-03-30 | True | | True | | |
| Investigating Two Variants of the Trivy Supply-Chain Compromise | 2026-03-27 | True | | True | | |
| Critical Vulnerabilities in Citrix NetScaler ADC and Gateway | 2026-03-25 | True | | True | | |
| Unauthenticated Remote Code Execution in Oracle Identity Manager and Web Services Manager | 2026-03-23 | True | | True | | |
| Inside the Cyber Infrastructure Behind DPRK Fake IT Worker Operations | 2026-03-23 | True | | True | | |
| Trivy Tag Compromise Supply Chain Attack | 2026-03-23 | True | | True | | |
| CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability.md | 2026-02-26 | True | | True | | |
| DPRK Fake IT Workers Fraud Playbook | 2026-02-24 | True | | True | | |
| GNU telnetd auth bypass CVE-2026-24061 | 2026-01-30 | True | | True | | |
| CVE-2026-1281 and CVE-2026-1340 Affecting Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-30 | True | | True | | |
| Heap-Based Buffer Overflow in Fortinet Products | 2026-01-15 | True | | True | | |
| Inside the DPRK Fake IT Workers Network: IP Ranges, Proxies, and Internal Coordination | 2026-01-05 | True | | True | | |
| Kudelski Security Research Center | 2025-12-29 | True | | True | | |
| Fortinet FortiCloud SSO Authentication Bypass Vulnerabilities Actively Exploited (CVE-2025-59718, CVE-2025-59719) | 2025-12-18 | True | | True | | |
| UPDATE: Critical Security Vulnerability in React Server Components (CVE-2025-55182) | 2025-12-04 | True | | True | | |
| F5 Security Incident | 2025-10-16 | True | | True | | |
| Microsoft disclosed a zero-day vulnerability affecting the NetMan service | 2025-10-15 | True | | True | | |
| Unauthorized Access to SonicWall Cloud Backup Firewall Preference Files | 2025-09-23 | True | | True | | |
| Inside a MuddyWater Intrusion: Exploitation of SharePoint and Living-Off-the-Land Tactics | 2025-09-17 | True | | True | | |
| How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories | 2025-08-19 | True | | True | | |
| Unauthorized Data Exposure via Range Queries in ServiceNow ACLs | 2025-07-10 | True | | True | | |
| Lunar Spider – Lotus V2 Loader Campaign Using Fake CAPTCHA Delivery and DLL Sideloading | 2025-06-27 | True | | True | | |
| Exploiting the Human Layer: Scattered Spider’s Identity-Centric Attack Chain (2022–2025) | 2025-06-23 | True | | True | | |
| XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service | 2025-06-19 | True | | True | | |
| Veeam Backup & Replication: Critical RCE Patched | 2025-06-18 | True | | True | | |
| Ivanti EPMM Bugs Combine for Unauthenticated RCE in the Wild | 2025-05-21 | True | | True | | |
| Unmasking BlackBasta: Inside the Ransomware Syndicate’s Leaked Operations | 2025-04-30 | True | | True | | |
| Critical Vulnerability in SAP NetWeaver Visual Composer | 2025-04-25 | True | | True | | |
| Getting RCE on browser-use/web-ui AI Agent Instances | 2025-04-23 | True | | True | | |
| Gladinet CentreStack and Gladinet Triofox – Critical RCE | 2025-04-16 | True | | True | | |
| Fortinet FortiSwitch – Unverified Password Change Vulnerability | 2025-04-09 | True | | True | | |
| Critical VMware ESXi, Workstation, Fusion Vulnerabilities Seen Exploited in Wild | 2025-03-06 | True | | True | | |
| Tracking Threat Actors: How Infrastructure Analysis Reveals Cyber Attack Patterns | 2025-03-05 | True | | True | | |
| Ivanti ICS, IPS, ISAC, CSA: Multiple Vulnerabilities Disclosed and Patched | 2025-02-12 | True | | True | | |
| Critical Vulnerability in SonicWall Secure Mobile Access (SMA) 1000 Series Appliances | 2025-01-29 | True | | True | | |
| Critical Vulnerabilities in Ivanti Connect Secure VPN Appliances | 2025-01-09 | True | | True | | |
| Critical Zero-Day Vulnerability in Palo Alto Networks Next-Generation Firewalls | 2024-11-18 | True | | True | | |
| FortiManager Critical CVE-2024-47575 “FortiJump” Allows RCE | 2024-10-25 | True | | True | | |
| Kubernetes Image Builder Vulnerabilities | 2024-10-17 | True | | True | | |
| Critical VMware vCenter Server Patch | 2024-09-18 | True | | True | | |
| Windows hosts experiencing Blue Screens due to CrowdStrike – Update | 2024-07-22 | True | | True | | |
