Rapid7 Blog Patch Cisco Catalyst SD-WAN Controller (vSmart) auth-bypass17 min read
Latest signal Cisco Talos Exploited in the wild Cisco Catalyst SD-WAN Controller (vSmart) UAT-8616 auth-bypass
May 14
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
May 14
Rapid7 Blog Exploited Cisco Catalyst SD-WAN Controller UAT-86166 min read
When Network Controllers Become "God Mode" for Attackers
May 14
Bishop Fox Research Model Context Protocol (MCP) ai-ml9 min read
Otto Support - Logging and Visibility in MCP Servers
May 14
ESET WeLiveSecurity Exploited PicassoLoader FrostyNeighbor16 min read
FrostyNeighbor: Fresh mischief and digital shenanigans
May 14
May 13
Rapid7 Blog Exploited ModeloRAT phishing21 min read
Pluribus and the Path to Domain Compromise: A ModeloRAT Case Study
May 13
Check Point Research Incident Rocket The Gentlemen38 min read
Thus Spoke…The Gentlemen
May 13
Google Project Zero PoC Google Pixel zero-day6 min read
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
May 12
Krebs on Security Roundup Windows patch-tuesday4 min read
Patch Tuesday, May 2026 Edition
May 12
Cisco Talos Patch Windows patch-tuesday7 min read
Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities
May 12
Qualys Security Blog Roundup Windows patch-tuesday16 min read
Microsoft and Adobe Patch Tuesday, May 2026 Security Update Review
May 11
Ars Technica (Security) Exploited Linux kernel privilege-escalation3 min read
Linux bitten by second severe vulnerability in as many weeks
May 11
Check Point Research Roundup MOVEit Automation ShinyHunters6 min read
11th May – Threat Intelligence Report
May 11
Check Point Research Roundup Qilin ransomware18 min read
The State of Ransomware – Q1 2026
May 11
Palo Alto Unit 42 Exploited Active Directory Certificate Services (AD CS) privilege-escalation28 min read
Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools
May 7
Bishop Fox Research mcp-atlassian ai-ml8 min read
Otto Support - SSRF and Token Passthrough with MCP
May 6
Bishop Fox Exploited LiteLLM Proxy rce13 min read
CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Proxy
May 6
Dark Reading Roundup ics-ot-iot45 min read
From Stuxnet to ChatGPT: 20 News Events That Shaped Cyber
May 6
Palo Alto Unit 42 Exploited PAN-OS CL-STA-113211 min read
Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
May 5
Palo Alto Unit 42 PoC Linux kernel (AF_ALG/algif_aead) privilege-escalation13 min read
Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years
May 4
Check Point Research Roundup ShinyHunters data-breach6 min read
4th May – Threat Intelligence Report
Apr 30
Krebs on Security Exploited Archer AX21 routers ddos-botnet8 min read
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
Apr 29
watchTowr Labs Exploited cPanel & WHM auth-bypass27 min read
The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
Apr 28
GitHub Security Lab Patch github.com rce6 min read
Securing the git push pipeline: Responding to a critical remote code execution vulnerability
Apr 27
Check Point Research Roundup Context.ai (OAuth token access) data-breach6 min read
27th April – Threat Intelligence Report
Apr 23
Bishop Fox Research otto-support CTF ai-ml9 min read
Otto Support – An MCP, Agentic-AI Security Challenge
Apr 20
Check Point Research Exploited Apache ActiveMQ data-breach6 min read
20th April – Threat Intelligence Report
Apr 16
ESET WeLiveSecurity Advisory ESET supply-chain13 min read
Supply chain dependencies: Have you checked your blind spot?
Apr 14
Krebs on Security Exploited Windows patch-tuesday4 min read
Patch Tuesday, April 2026 Edition
Apr 14
GitHub Security Lab Research GitHub Secure Code Game ai-ml9 min read
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
Apr 13
Check Point Research Exploited Bitcoin Depot wallets/crypto-ATM systems Qilin6 min read
13th April – Threat Intelligence Report
Apr 7
Bishop Fox Exploited FortiClient EMS auth-bypass15 min read
API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616
Apr 7
NCSC UK Exploited TP-Link WR841N APT2810 min read
APT28 exploit routers to enable DNS hijacking operations
Apr 2
watchTowr Labs Research Progress ShareFile Storage Zone Controller rce29 min read
You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
Apr 2
Mandiant Research VMware vCenter Server Appliance (VCSA) BRICKSTORM46 min read
vSphere and BRICKSTORM Malware: A Defender's Guide
Mar 29
watchTowr Labs Exploited NetScaler ADC info-disclosure15 min read
Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)
Mar 28
watchTowr Labs Research NetScaler ADC info-disclosure17 min read
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)
Mar 26
Bishop Fox PoC strongSwan ddos-botnet11 min read
strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication
Mar 19
watchTowr Labs Patch telnetd rce26 min read