Flash Advisory: CISA Orders Immediate Patching of Actively Exploited Fortinet FortiSandbox Vulnerabilities
Subscriber content
Flash Advisories
Time-sensitive cybersecurity advisories across every sector. Published by The Fowler Group analysts as threats develop.
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Ernst & Young Data Breach via Compromised Third-Party Support System
Subscriber content
Flash Advisory: Windows LegacyHive Zero-Day Privilege Escalation on Current Systems
Subscriber content
Flash Advisory: 20+ Brazilian Government Websites Hijacked for Malware Distribution in PhantomEnigma Campaign
Subscriber content
Flash Advisory: Ransomware Attack on Coca-Cola's Fairlife Subsidiary Disrupts US Dairy Production
Subscriber content
Flash Advisory: CISA Emergency Directive: Critical Oracle E-Business Suite Vulnerability Under Active Exploitation
Subscriber content
Flash Advisory: Russian Threat Actor Distributing Trojanized Zoom/WebEx with Starland RAT Backdoor
Subscriber content
Flash Advisory: n8n Authentication Bypass: Token Exchange Flaw Enables Unauthorized Account Access
Subscriber content
Flash Advisory: ClickLock macOS Stealer: New Infostealer with Aggressive Credential Harvesting Technique
Subscriber content
Flash Advisory: Qantas Data Breach Exposes 5.7 Million Records via Tech Support Scam
Subscriber content
Flash Advisory: Law Firm Security Breach: Shared Admin Password Exposes Client Data
Subscriber content
Flash Advisory: Critical Zoom Account Takeover Vulnerability in Windows Desktop Client and SDK
Subscriber content
Flash Advisory: OkoBot Malware Framework Targets Cryptocurrency Wallet Users via Seed Phrase Phishing
Subscriber content
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Windows User Profile Service Zero-Day PoC Released; Elevation of Privilege Risk
Subscriber content
Flash Advisory: Microsoft Patch Tuesday: Record 622 Vulnerabilities Including Two Zero-Days Under Active Exploitation
Subscriber content
Flash Advisory: SonicWall SMA1000 Zero-Day Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: LabubaRAT: New Rust-Based RAT Masquerading as NVIDIA Software Targets Windows Hosts
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: OAuth Client ID Spoofing Technique Enables Credential Validation in Microsoft Entra ID Without Detection
Subscriber content
Flash Advisory: Microsoft-Signed UEFI Shims Enable Secure Boot Bypass on Multiple Systems
Subscriber content
Flash Advisory: RabbitMQ Access Control Flaws Enable OAuth Secret Leakage and Cross-Tenant Exposure
Subscriber content
Flash Advisory: Cursor IDE Vulnerability Allows Auto-Execution of Malicious Code in Poisoned Repositories
Subscriber content
Flash Advisory: SAP Releases Critical Security Patches for NetWeaver and Commerce Cloud
Subscriber content
Flash Advisory: New Phishing Kits Bypass MFA on Microsoft 365 Accounts
Subscriber content
Flash Advisory: Grok Build CLI Uploads Entire Git Repositories to xAI Cloud Storage Without User Consent
Subscriber content
Flash Advisory: 148 Malicious npm Packages Used for Browser-Based DDoS Botnet Campaign
Subscriber content
Flash Advisory: ShinyHunters Exploiting Salesforce OAuth Misconfigurations in Year-Long Campaign
Subscriber content
Flash Advisory: Popular Browser Extension ModHeader Removed for Hidden Data Collection Capability
Subscriber content
Flash Advisory: Japan's Largest Taxi Operator Nihon Kotsu Hit by Cyberattack; Systems Shutdown
Subscriber content
Flash Advisory: CISA Adds Maximum-Severity Joomla Extension Flaws to KEV Catalog; Active Exploitation Reported
Subscriber content
Flash Advisory: Russian State-Sponsored Critical Infrastructure Attacks via Router Exploitation
Subscriber content
Flash Advisory: Compromised jscrambler npm Package (v8.14.0) Delivers Multi-Platform Infostealer
Subscriber content
Flash Advisory: Critical Zimbra Classic Web Client XSS Vulnerability Enables Arbitrary Code Execution
Subscriber content
Flash Advisory: Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Subscriber content
Flash Advisory: Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: Adobe Patches Seven Maximum-Severity ColdFusion and Campaign Vulnerabilities
Subscriber content
Flash Advisory: Aflac Data Breach Exposes Customer Personal and Financial Information
Subscriber content
Flash Advisory: 282 iOS AI Apps Exposing API Keys and LLM Access in Network Traffic
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Critical Pre-Auth RCE in Progress Kemp LoadMaster (CVE-2026-8037) — Patch Immediately
Subscriber content
Flash Advisory: India's .bank Domain Registry Leaks Sensitive Data via Open API – Impersonation Risk
Subscriber content
Flash Advisory: BioShocking Attack Exploits AI Browsers to Steal User Credentials
Subscriber content
Flash Advisory: Mustang Panda APT Actively Compromising Indian Government Networks via Zoho WorkDrive
Subscriber content
Flash Advisory: Active 0-Day Exploits Released in Public Repository; Multiple Vulnerabilities Under Active Attack
Subscriber content
Flash Advisory: NAIC Breached via Oracle PeopleSoft Zero-Day; ShinyHunters Claims Data Theft
Subscriber content
Flash Advisory: Nation-State Actors Targeting Water Infrastructure via Basic Security Failures
Subscriber content
Flash Advisory: Critical SimpleHelp Vulnerability (CVE-2026-48558) Actively Exploited to Deploy Djinn Stealer Malware
Subscriber content
Flash Advisory: Critical Oracle E-Business Suite Vulnerability (CVE-2026-46817) Under Active Exploitation
Subscriber content
Flash Advisory: Nissan Breach via Oracle PeopleSoft Vulnerability Exposes Payroll Records and SSNs
Subscriber content
Flash Advisory: Critical libssh2 Client-Side RCE Vulnerability (CVE-2026-55200) – Public PoC Available
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: Russian Intelligence Phishing Campaign Escalates: Signal Backup Recovery Keys Now Targeted
Subscriber content
Flash Advisory: Chinese APT Deploys TinyRCT Backdoor Targeting Southeast Asian Energy and Government Infrastructure
Subscriber content
Flash Advisory: Critical Linux Kernel Vulnerability (CVE-2026-46331) Enables Unauthenticated Root Access
Subscriber content
Flash Advisory: Amazon Q Developer Vulnerability (CVE-2026-12957) Enables Code Execution and Credential Theft
Subscriber content
Flash Advisory: CISA Adds PTC Windchill RCE to KEV Catalog – Active Exploitation Confirmed
Subscriber content
Flash Advisory: Linux Kernel Privilege Escalation (CVE-2026-43503) – Public Exploit Available
Subscriber content
Flash Advisory: Miasma Malware Supply Chain Attack Targets npm and Go Ecosystems via Compromised Packages
Subscriber content
Flash Advisory: Active Phishing Campaign Targeting Hotels with Node.js Implant
Subscriber content
Flash Advisory: Mistic Backdoor Deployed in Multi-Sector Financially Motivated Attacks
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Law Enforcement Disrupts Amadey and StealC Malware Networks; 27M Credentials Recovered
Subscriber content
Flash Advisory: Cisco SD-WAN vManage Zero-Day Actively Exploited – Immediate Patching Required
Subscriber content
Flash Advisory: Malicious Edge extension abuses Native Messaging as bridge to malware
Subscriber content
Flash Advisory: Apple macOS Vulnerability Allows Non-Admin Security Tool Bypass
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: KDDI Breach Exposes 14.2 Million Managed Email Credentials
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Cordyceps Campaign: Malicious Pull Requests Targeting Major Developer Tools and CI/CD Pipelines
Subscriber content
Flash Advisory: Healthtech Firm Xsolis Breach Exposes 1.4 Million Records via Phishing Attack
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: Scattered Spider Members Convicted for Transport for London Breach; Critical Infrastructure Targeting Confirmed
Subscriber content
Flash Advisory: DifyTap Vulnerabilities in Dify Platform Enable Cross-Tenant AI Chat Exposure
Subscriber content
Flash Advisory: FFmpeg PixelSmash Vulnerability Enables RCE and DoS Across Multiple Applications
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: ShapedPlugin Supply Chain Attack Distributes Malware via Official WordPress Updates
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Active Password-Stealing Attack Targeting 75,000 Fortinet Firewalls — Immediate Credential Rotation Required
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (RoguePlanet) Patch in Development
Subscriber content
Flash Advisory: 144 Mastra npm Packages Compromised in Supply Chain Attack—Immediate Dependency Review Required
Subscriber content
Flash Advisory: CISA Alerts: Joomla JCE Vulnerability (CVE-2026-48907) Under Active Exploitation
Subscriber content
Flash Advisory: Google Vertex AI SDK Vulnerability Enables Unauthorized Model Hijacking and Code Execution
Subscriber content
Flash Advisory: Critical Fortinet Sandbox Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: DragonForce Ransomware Abuses Microsoft Teams Infrastructure for C2 Communication
Subscriber content
Flash Advisory: Cardiac Monitor Manufacturer Breach Exposes Patient Data via Third-Party App Compromise
Subscriber content
Flash Advisory: Rokarolla Android Banking Trojan Targets 217 Financial Apps
Subscriber content
Flash Advisory: ClickFix Malware Campaigns Expand With New Loaders Targeting Education and Financial Sectors
Subscriber content
Flash Advisory: iRhythm Holdings Discloses Patient Data Breach via Third-Party Applications
Subscriber content
Flash Advisory: CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV Catalog; Federal Agencies Required to Patch by June 18
Subscriber content
Flash Advisory: Cisco SD-WAN vManage Zero-Day Actively Exploited – Immediate Patching Required
Subscriber content
Flash Advisory: Critical 'SearchLeak' Prompt Injection Vulnerability in Copilot Patched; AI Injection Attacks Emerging
Subscriber content
Flash Advisory: China-Linked Group Exploits Google Workspace to Steal Research and Defense Data from North American Institutions
Subscriber content
Flash Advisory: China-Linked Group Exploits Google Workspace to Steal Research and Defense Data from North American Institutions
Subscriber content
Flash Advisory: China-Linked Group Exploits Google Workspace to Steal Research and Defense Data from North American Institutions
Subscriber content
No advisories match your filters. .