CVE

Cyber Threat Intel 6 min Three Unrelated Groups Walked Through the Same Cisco Flaw Talos found Sandworm's implant, Qilin ransomware and a third intruder inside Secure Firewall Management Center... KE Kenji Tanaka 12 Sep Developer Tools 7 min Attackers Are Minting Artifactory Admin Tokens. The Log Says Anonymous. Two flaws chain an unauthenticated request into administrator scope in under five minutes, and the audit trail... KE Kenji Tanaka 12 Sep Developer Tools 6 min GitLab Patched a 10.0 File-Read Flaw. Probes Appeared the Next Day. An unauthenticated attacker could read any file on a self-managed server. What sits on that server is every cr... MA Maya Lin 12 Sep Cybersecurity 7 min PaperCut Was Being Exploited for a Day Before It Had a CVE Number The 27 August advisory confirmed active exploitation while carrying no identifier, no severity score and no vu... PR Priya Nair 30 Aug Cybersecurity 7 min The Unitree Robot Bluetooth Flaw Was a Missing Cloud Check Two root RCE chains against the G1 EDU, one starting over Bluetooth without pairing. The step that made it wor... KE Kenji Tanaka 29 Aug Cybersecurity 8 min Linux 'pedit COW' (CVE-2026-46331) Hands Local Users Root via Page-Cache Corruption — Patch and Reboot CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local privilege-escalation flaw in the traffic-control... CY Cyber Team 30 Jun Cybersecurity 6 min Cisco Unified CM SSRF Flaw CVE-2026-20230 Is Now Being Exploited — Patch by 28 June and Check for Compromise CISA added CVE-2026-20230, a server-side request forgery flaw in Cisco Unified Communications Manager, to its... CY Cyber Team 30 Jun Cybersecurity 6 min Three Maximum-Severity Ubiquiti UniFi OS Flaws Are Being Exploited — Patch via Bulletin 064 and Check for Compromise CISA added three maximum-severity Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, -34909 and -34910) to its... CY Cyber Team 30 Jun Cybersecurity 6 min Joomla JCE Flaw CVE-2026-48907 (CVSS 10.0) Is Being Actively Exploited — Patch and Check for Compromise CISA added CVE-2026-48907, a maximum-severity flaw in the Widget Factory Joomla Content Editor extension (JCE... CY Cyber Team 19 Jun Cybersecurity 6 min Palo Alto GlobalProtect Flaw CVE-2026-0257 Is Under Active Exploitation — Patch or Mitigate Now Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication-bypass flaw in PAN-OS... CY Cyber Team 19 Jun Cybersecurity 7 min CSA Flags GlobalProtect Auth-Bypass CVE-2026-0257 as Critical While Attackers Forge VPN Cookies in the Wild Singapore's CSA rates a GlobalProtect authentication-bypass flaw critical (9.1) — sterner than Palo Alto's own... CY Cyber Team 7 Jun Cybersecurity 7 min LiteSpeed cPanel Plugin Zero-Day CVE-2026-48172: Maximum-Severity Root Escalation Under Active Exploitation CVE-2026-48172 in the LiteSpeed User-End cPanel Plugin carries a CVSS v4.0 score of 10.0 and was added to CISA... CY Cyber Team 2 Jun Cybersecurity 3 min Bugs to Patch Now: A Critical OTRS Flaw and a Linux Root Hole on CISA's List A short, practical read of two urgent vulnerabilities: a critical pre-authentication flaw in the OTRS service... CY Cyber Team 2 Jun Cybersecurity 5 min CISA orders agencies to patch an actively exploited Palo Alto firewall flaw by 1 June Attackers are exploiting a flaw in Palo Alto Networks' PAN-OS that lets them slip past security controls and o... CY Cyber Team 2 Jun Cybersecurity 9 min Threat Brief, Week of 18 May 2026: Suspected State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire Our weekly threat read: suspected state-backed espionage against Malaysian government networks, a Microsoft ma... CY Cyber Team 30 May Cybersecurity 6 min An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM... CY Cyber Team 30 May Cybersecurity 8 min Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Cata... CY Cyber Team 18 May Cybersecurity 7 min CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE... CY Cyber Team 18 May Developer Tools 9 min GitHub Enterprise Server Flaw CVE-2026-3854 Lets Users With Push Access Execute Code — Patch Now CVE-2026-3854, a high-severity flaw in GitHub Enterprise Server (CVSS 8.7), let any user with push access run... CY Cyber Team 8 May Cybersecurity 9 min Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively ex... CY Cyber Team 8 May