Flash Advisory: CISA Orders Immediate Patching of Actively Exploited Fortinet FortiSandbox Vulnerabilities
Subscriber content
Cross-Sector
Cross-sector cybersecurity intelligence relevant to every industry we cover. Includes weekly Week in Review issues and time-sensitive Flash Advisories that affect organizations regardless of vertical.
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Ernst & Young Data Breach via Compromised Third-Party Support System
Subscriber content
Flash Advisory: Windows LegacyHive Zero-Day Privilege Escalation on Current Systems
Subscriber content
Flash Advisory: 20+ Brazilian Government Websites Hijacked for Malware Distribution in PhantomEnigma Campaign
Subscriber content
Flash Advisory: Ransomware Attack on Coca-Cola's Fairlife Subsidiary Disrupts US Dairy Production
Subscriber content
Flash Advisory: CISA Emergency Directive: Critical Oracle E-Business Suite Vulnerability Under Active Exploitation
Subscriber content
Flash Advisory: Russian Threat Actor Distributing Trojanized Zoom/WebEx with Starland RAT Backdoor
Subscriber content
Flash Advisory: n8n Authentication Bypass: Token Exchange Flaw Enables Unauthorized Account Access
Subscriber content
Flash Advisory: ClickLock macOS Stealer: New Infostealer with Aggressive Credential Harvesting Technique
Subscriber content
Flash Advisory: Critical Zoom Account Takeover Vulnerability in Windows Desktop Client and SDK
Subscriber content
Flash Advisory: OkoBot Malware Framework Targets Cryptocurrency Wallet Users via Seed Phrase Phishing
Subscriber content
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Windows User Profile Service Zero-Day PoC Released; Elevation of Privilege Risk
Subscriber content
Flash Advisory: Microsoft Patch Tuesday: Record 622 Vulnerabilities Including Two Zero-Days Under Active Exploitation
Subscriber content
Flash Advisory: SonicWall SMA1000 Zero-Day Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: LabubaRAT: New Rust-Based RAT Masquerading as NVIDIA Software Targets Windows Hosts
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: OAuth Client ID Spoofing Technique Enables Credential Validation in Microsoft Entra ID Without Detection
Subscriber content
Flash Advisory: Microsoft-Signed UEFI Shims Enable Secure Boot Bypass on Multiple Systems
Subscriber content
Flash Advisory: RabbitMQ Access Control Flaws Enable OAuth Secret Leakage and Cross-Tenant Exposure
Subscriber content
Flash Advisory: Cursor IDE Vulnerability Allows Auto-Execution of Malicious Code in Poisoned Repositories
Subscriber content
Flash Advisory: SAP Releases Critical Security Patches for NetWeaver and Commerce Cloud
Subscriber content
Flash Advisory: New Phishing Kits Bypass MFA on Microsoft 365 Accounts
Subscriber content
Flash Advisory: Grok Build CLI Uploads Entire Git Repositories to xAI Cloud Storage Without User Consent
Subscriber content
Flash Advisory: 148 Malicious npm Packages Used for Browser-Based DDoS Botnet Campaign
Subscriber content
Flash Advisory: ShinyHunters Exploiting Salesforce OAuth Misconfigurations in Year-Long Campaign
Subscriber content
Flash Advisory: Popular Browser Extension ModHeader Removed for Hidden Data Collection Capability
Subscriber content
Flash Advisory: CISA Adds Maximum-Severity Joomla Extension Flaws to KEV Catalog; Active Exploitation Reported
Subscriber content
Flash Advisory: Russian State-Sponsored Critical Infrastructure Attacks via Router Exploitation
Subscriber content
Flash Advisory: Compromised jscrambler npm Package (v8.14.0) Delivers Multi-Platform Infostealer
Subscriber content
Flash Advisory: Critical Zimbra Classic Web Client XSS Vulnerability Enables Arbitrary Code Execution
Subscriber content
Flash Advisory: Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Subscriber content
Flash Advisory: Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: Adobe Patches Seven Maximum-Severity ColdFusion and Campaign Vulnerabilities
Subscriber content
Flash Advisory: 282 iOS AI Apps Exposing API Keys and LLM Access in Network Traffic
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Critical Pre-Auth RCE in Progress Kemp LoadMaster (CVE-2026-8037) — Patch Immediately
Subscriber content
Flash Advisory: BioShocking Attack Exploits AI Browsers to Steal User Credentials
Subscriber content
Flash Advisory: Mustang Panda APT Actively Compromising Indian Government Networks via Zoho WorkDrive
Subscriber content
Flash Advisory: Active 0-Day Exploits Released in Public Repository; Multiple Vulnerabilities Under Active Attack
Subscriber content
Flash Advisory: Critical SimpleHelp Vulnerability (CVE-2026-48558) Actively Exploited to Deploy Djinn Stealer Malware
Subscriber content
Flash Advisory: Critical Oracle E-Business Suite Vulnerability (CVE-2026-46817) Under Active Exploitation
Subscriber content
Flash Advisory: Nissan Breach via Oracle PeopleSoft Vulnerability Exposes Payroll Records and SSNs
Subscriber content
Flash Advisory: Critical libssh2 Client-Side RCE Vulnerability (CVE-2026-55200) – Public PoC Available
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: Russian Intelligence Phishing Campaign Escalates: Signal Backup Recovery Keys Now Targeted
Subscriber content
Flash Advisory: Critical Linux Kernel Vulnerability (CVE-2026-46331) Enables Unauthenticated Root Access
Subscriber content
Flash Advisory: Amazon Q Developer Vulnerability (CVE-2026-12957) Enables Code Execution and Credential Theft
Subscriber content
Flash Advisory: CISA Adds PTC Windchill RCE to KEV Catalog – Active Exploitation Confirmed
Subscriber content
Flash Advisory: Linux Kernel Privilege Escalation (CVE-2026-43503) – Public Exploit Available
Subscriber content
Flash Advisory: Miasma Malware Supply Chain Attack Targets npm and Go Ecosystems via Compromised Packages
Subscriber content
Flash Advisory: Active Phishing Campaign Targeting Hotels with Node.js Implant
Subscriber content
Flash Advisory: Mistic Backdoor Deployed in Multi-Sector Financially Motivated Attacks
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Law Enforcement Disrupts Amadey and StealC Malware Networks; 27M Credentials Recovered
Subscriber content
Flash Advisory: Cisco SD-WAN vManage Zero-Day Actively Exploited – Immediate Patching Required
Subscriber content
Flash Advisory: Malicious Edge extension abuses Native Messaging as bridge to malware
Subscriber content
Flash Advisory: Apple macOS Vulnerability Allows Non-Admin Security Tool Bypass
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: KDDI Breach Exposes 14.2 Million Managed Email Credentials
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Cordyceps Campaign: Malicious Pull Requests Targeting Major Developer Tools and CI/CD Pipelines
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: DifyTap Vulnerabilities in Dify Platform Enable Cross-Tenant AI Chat Exposure
Subscriber content
Flash Advisory: FFmpeg PixelSmash Vulnerability Enables RCE and DoS Across Multiple Applications
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: ShapedPlugin Supply Chain Attack Distributes Malware via Official WordPress Updates
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Active Password-Stealing Attack Targeting 75,000 Fortinet Firewalls — Immediate Credential Rotation Required
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (RoguePlanet) Patch in Development
Subscriber content
Flash Advisory: 144 Mastra npm Packages Compromised in Supply Chain Attack—Immediate Dependency Review Required
Subscriber content
Flash Advisory: CISA Alerts: Joomla JCE Vulnerability (CVE-2026-48907) Under Active Exploitation
Subscriber content
Flash Advisory: Google Vertex AI SDK Vulnerability Enables Unauthorized Model Hijacking and Code Execution
Subscriber content
Flash Advisory: Critical Fortinet Sandbox Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: DragonForce Ransomware Abuses Microsoft Teams Infrastructure for C2 Communication
Subscriber content
Flash Advisory: CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV Catalog; Federal Agencies Required to Patch by June 18
Subscriber content
Flash Advisory: Cisco SD-WAN vManage Zero-Day Actively Exploited – Immediate Patching Required
Subscriber content
Flash Advisory: Critical 'SearchLeak' Prompt Injection Vulnerability in Copilot Patched; AI Injection Attacks Emerging
Subscriber content
Flash Advisory: China-Linked Group Exploits Google Workspace to Steal Research and Defense Data from North American Institutions
Subscriber content
Flash Advisory: LiteLLM Vulnerability Chain Enables Full Server Takeover and API Key Exposure
Subscriber content
Flash Advisory: Council of Europe Breached via PeopleSoft Vulnerability; ShinyHunters Claims 100+ Victims
Subscriber content
Flash Advisory: Popular WordPress Plugins Compromised with Admin Account Backdoors
Subscriber content
Flash Advisory: Microsoft 365 Copilot SearchLeak Vulnerability Enables One-Click Data Theft
Subscriber content
Flash Advisory: Palo Alto PAN-OS GlobalProtect VPN Vulnerability Under Active Exploitation
Subscriber content
Flash Advisory: Critical Splunk Enterprise RCE Vulnerability (CVE-2026-20253) – Unauthenticated Exploitation
Subscriber content
Flash Advisory: Critical: 400+ Arch Linux AUR Packages Compromised with Infostealer and eBPF Rootkit
Subscriber content
Flash Advisory: Critical: China-Linked APT Backdoored Linux PAM/OpenSSH for Nearly a Decade
Subscriber content
Flash Advisory: Ivanti Sentry Max-Severity Flaw Under Active Exploitation Within 24 Hours of Disclosure
Subscriber content
Flash Advisory: OpenClaw AI Agent Vulnerable to Code Execution and Data Exfiltration Attacks
Subscriber content
Flash Advisory: ShinyHunters Exploiting Oracle PeopleSoft 0-Day Against 100+ Organizations
Subscriber content
Flash Advisory: BitLocker Zero-Day Bypass Disclosed—Immediate Patching Required for Windows Systems
Subscriber content
Flash Advisory: Active Exploitation of Path Traversal Vulnerability in Langflow AI Platform
Subscriber content
Flash Advisory: Oracle PeopleSoft Servers Targeted in ShinyHunters Data Theft Campaign
Subscriber content
Flash Advisory: Windows Defender Zero-Day PoC Released by Nightmare-Eclipse Researcher
Subscriber content
Flash Advisory: Windows Defender Zero-Day Publicly Disclosed by Security Researcher
Subscriber content