Palo Alto Unit 42 Exploited Active Directory Certificate Services (AD CS) privilege-escalation28 min read
Latest signal Check Point Research News roundup Qilin ransomware Akira
May 11
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
May 7
Bishop Fox Research mcp-atlassian ai-ml8 min read
Otto Support - SSRF and Token Passthrough with MCP
May 6
Bishop Fox Exploited LiteLLM Proxy rce13 min read
CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Proxy
May 6
Dark Reading Roundup ics-ot-iot45 min read
From Stuxnet to ChatGPT: 20 News Events That Shaped Cyber
May 6
Palo Alto Unit 42 Exploited PAN-OS CL-STA-113211 min read
Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
May 5
Palo Alto Unit 42 PoC Linux kernel (AF_ALG/algif_aead) privilege-escalation13 min read
Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years
May 4
Check Point Research Roundup ShinyHunters data-breach6 min read
4th May – Threat Intelligence Report
Apr 30
Krebs on Security Exploited Archer AX21 routers ddos-botnet8 min read
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
Apr 29
watchTowr Labs Exploited cPanel & WHM auth-bypass27 min read
The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
Apr 28
GitHub Security Lab Patch github.com rce6 min read
Securing the git push pipeline: Responding to a critical remote code execution vulnerability
Apr 27
Check Point Research Roundup Context.ai (OAuth token access) data-breach6 min read
27th April – Threat Intelligence Report
Apr 23
Bishop Fox Research otto-support CTF ai-ml9 min read
Otto Support – An MCP, Agentic-AI Security Challenge
Apr 20
Check Point Research Exploited Apache ActiveMQ data-breach6 min read
20th April – Threat Intelligence Report
Apr 16
ESET WeLiveSecurity Advisory ESET supply-chain13 min read
Supply chain dependencies: Have you checked your blind spot?
Apr 14
Krebs on Security Exploited Windows patch-tuesday4 min read
Patch Tuesday, April 2026 Edition
Apr 14
GitHub Security Lab Research GitHub Secure Code Game ai-ml9 min read
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
Apr 13
Check Point Research Exploited Bitcoin Depot wallets/crypto-ATM systems Qilin6 min read
13th April – Threat Intelligence Report
Apr 7
Bishop Fox Exploited FortiClient EMS auth-bypass15 min read
API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616
Apr 7
NCSC UK Exploited TP-Link WR841N APT2810 min read
APT28 exploit routers to enable DNS hijacking operations
Apr 2
watchTowr Labs Research Progress ShareFile Storage Zone Controller rce29 min read
You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
Apr 2
Mandiant Research VMware vCenter Server Appliance (VCSA) BRICKSTORM46 min read
vSphere and BRICKSTORM Malware: A Defender's Guide
Mar 29
watchTowr Labs Exploited NetScaler ADC info-disclosure15 min read
Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)
Mar 28
watchTowr Labs Research NetScaler ADC info-disclosure17 min read
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)
Mar 26
Bishop Fox PoC strongSwan ddos-botnet11 min read
strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication
Mar 19
watchTowr Labs Patch telnetd rce26 min read
A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)
Mar 18
watchTowr Labs PoC FootPrints web-app31 min read
The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)
Mar 18
Mandiant Exploited iOS UNC674832 min read
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
Mar 16
Mandiant Research ransomware58 min read
Ransomware Tactics, Techniques, and Procedures in a Shifting Threat Landscape
Mar 10
ESET WeLiveSecurity Exploited BeardShell Sednit (APT28)21 min read
Sednit reloaded: Back in the trenches
Mar 9
Bishop Fox Exploited FortiClient EMS network-edge17 min read
Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643
Mar 6
GitHub Security Lab Research GitHub Security Lab Taskflow Agent ai-ml30 min read
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
Mar 5
Mandiant Exploited GTIG zero-day tracking UNC522131 min read
Look What You Made Us Patch: 2025 Zero-Days in Review
Mar 3
watchTowr Labs Patch Junos OS Evolved (PTX Series) rce12 min read
Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)
Mar 3
Mandiant Exploited iOS exploit kit Coruna UNC635318 min read
Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
Feb 26
Google Project Zero PoC Windows privilege-escalation17 min read
A Deep Dive into the GetProcessHandleFromHwnd API
Feb 25
watchTowr Labs PoC SolarWinds Web Help Desk rce37 min read
Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))
Feb 17
Mandiant Exploited Dell RecoverPoint for Virtual Machines UNC620110 min read
UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day
Jan 30
watchTowr Labs Exploited Ivanti Endpoint Manager Mobile (EPMM) rce12 min read
Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
Jan 30
ESET WeLiveSecurity Roundup ServiceNow data-breach2 min read