Flash Advisory: CISA Orders Immediate Patching of Actively Exploited Fortinet FortiSandbox Vulnerabilities
Subscriber content
Reports
Every Fowler Group intelligence report in one place. Filter by report type and sector, search by keyword, narrow by date.
Type
Sector
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Ernst & Young Data Breach via Compromised Third-Party Support System
Subscriber content
Flash Advisory: Windows LegacyHive Zero-Day Privilege Escalation on Current Systems
Subscriber content
Flash Advisory: 20+ Brazilian Government Websites Hijacked for Malware Distribution in PhantomEnigma Campaign
Subscriber content
Flash Advisory: Ransomware Attack on Coca-Cola's Fairlife Subsidiary Disrupts US Dairy Production
Subscriber content
Flash Advisory: CISA Emergency Directive: Critical Oracle E-Business Suite Vulnerability Under Active Exploitation
Subscriber content
Flash Advisory: Russian Threat Actor Distributing Trojanized Zoom/WebEx with Starland RAT Backdoor
Subscriber content
Flash Advisory: n8n Authentication Bypass: Token Exchange Flaw Enables Unauthorized Account Access
Subscriber content
Flash Advisory: ClickLock macOS Stealer: New Infostealer with Aggressive Credential Harvesting Technique
Subscriber content
Flash Advisory: Qantas Data Breach Exposes 5.7 Million Records via Tech Support Scam
Subscriber content
Flash Advisory: Law Firm Security Breach: Shared Admin Password Exposes Client Data
Subscriber content
Flash Advisory: Critical Zoom Account Takeover Vulnerability in Windows Desktop Client and SDK
Subscriber content
Flash Advisory: OkoBot Malware Framework Targets Cryptocurrency Wallet Users via Seed Phrase Phishing
Subscriber content
Flash Advisory: CISA Alerts: Three SharePoint Flaws Under Active Exploitation
Subscriber content
Flash Advisory: Windows User Profile Service Zero-Day PoC Released; Elevation of Privilege Risk
Subscriber content
Flash Advisory: Microsoft Patch Tuesday: Record 622 Vulnerabilities Including Two Zero-Days Under Active Exploitation
Subscriber content
Flash Advisory: SonicWall SMA1000 Zero-Day Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: LabubaRAT: New Rust-Based RAT Masquerading as NVIDIA Software Targets Windows Hosts
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: OAuth Client ID Spoofing Technique Enables Credential Validation in Microsoft Entra ID Without Detection
Subscriber content
Flash Advisory: Microsoft-Signed UEFI Shims Enable Secure Boot Bypass on Multiple Systems
Subscriber content
Flash Advisory: RabbitMQ Access Control Flaws Enable OAuth Secret Leakage and Cross-Tenant Exposure
Subscriber content
Flash Advisory: Cursor IDE Vulnerability Allows Auto-Execution of Malicious Code in Poisoned Repositories
Subscriber content
Flash Advisory: SAP Releases Critical Security Patches for NetWeaver and Commerce Cloud
Subscriber content
Flash Advisory: New Phishing Kits Bypass MFA on Microsoft 365 Accounts
Subscriber content
Flash Advisory: Grok Build CLI Uploads Entire Git Repositories to xAI Cloud Storage Without User Consent
Subscriber content
Flash Advisory: 148 Malicious npm Packages Used for Browser-Based DDoS Botnet Campaign
Subscriber content
Flash Advisory: ShinyHunters Exploiting Salesforce OAuth Misconfigurations in Year-Long Campaign
Subscriber content
Flash Advisory: Popular Browser Extension ModHeader Removed for Hidden Data Collection Capability
Subscriber content
Flash Advisory: Japan's Largest Taxi Operator Nihon Kotsu Hit by Cyberattack; Systems Shutdown
Subscriber content
Flash Advisory: CISA Adds Maximum-Severity Joomla Extension Flaws to KEV Catalog; Active Exploitation Reported
Subscriber content
Flash Advisory: Russian State-Sponsored Critical Infrastructure Attacks via Router Exploitation
Subscriber content
Flash Advisory: Compromised jscrambler npm Package (v8.14.0) Delivers Multi-Platform Infostealer
Subscriber content
Flash Advisory: Critical Zimbra Classic Web Client XSS Vulnerability Enables Arbitrary Code Execution
Subscriber content
Flash Advisory: Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Subscriber content
Flash Advisory: Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package
Subscriber content
Flash Advisory: URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Subscriber content
Flash Advisory: Adobe Patches Seven Maximum-Severity ColdFusion and Campaign Vulnerabilities
Subscriber content
Private Equity Monthly Cybersecurity Brief — June 2026
Subscriber content
Healthcare Monthly Cybersecurity Brief — June 2026
Subscriber content
Legal Monthly Cybersecurity Brief — June 2026
Subscriber content
Education Monthly Cybersecurity Brief — June 2026
Subscriber content
Transportation & Logistics Monthly Cybersecurity Brief — June 2026
Subscriber content
Energy & Utilities Monthly Cybersecurity Brief — June 2026
Subscriber content
Banking & Credit Unions Monthly Cybersecurity Brief — June 2026
Subscriber content
Flash Advisory: Aflac Data Breach Exposes Customer Personal and Financial Information
Subscriber content
Flash Advisory: 282 iOS AI Apps Exposing API Keys and LLM Access in Network Traffic
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Critical Pre-Auth RCE in Progress Kemp LoadMaster (CVE-2026-8037) — Patch Immediately
Subscriber content
Flash Advisory: India's .bank Domain Registry Leaks Sensitive Data via Open API – Impersonation Risk
Subscriber content
Flash Advisory: BioShocking Attack Exploits AI Browsers to Steal User Credentials
Subscriber content
Flash Advisory: Mustang Panda APT Actively Compromising Indian Government Networks via Zoho WorkDrive
Subscriber content
Flash Advisory: Active 0-Day Exploits Released in Public Repository; Multiple Vulnerabilities Under Active Attack
Subscriber content
Flash Advisory: NAIC Breached via Oracle PeopleSoft Zero-Day; ShinyHunters Claims Data Theft
Subscriber content
Flash Advisory: Nation-State Actors Targeting Water Infrastructure via Basic Security Failures
Subscriber content
Flash Advisory: Critical SimpleHelp Vulnerability (CVE-2026-48558) Actively Exploited to Deploy Djinn Stealer Malware
Subscriber content
Flash Advisory: Critical Oracle E-Business Suite Vulnerability (CVE-2026-46817) Under Active Exploitation
Subscriber content
Flash Advisory: Nissan Breach via Oracle PeopleSoft Vulnerability Exposes Payroll Records and SSNs
Subscriber content
Flash Advisory: Critical libssh2 Client-Side RCE Vulnerability (CVE-2026-55200) – Public PoC Available
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: Russian Intelligence Phishing Campaign Escalates: Signal Backup Recovery Keys Now Targeted
Subscriber content
Flash Advisory: Chinese APT Deploys TinyRCT Backdoor Targeting Southeast Asian Energy and Government Infrastructure
Subscriber content
Flash Advisory: Critical Linux Kernel Vulnerability (CVE-2026-46331) Enables Unauthenticated Root Access
Subscriber content
Flash Advisory: Amazon Q Developer Vulnerability (CVE-2026-12957) Enables Code Execution and Credential Theft
Subscriber content
Flash Advisory: CISA Adds PTC Windchill RCE to KEV Catalog – Active Exploitation Confirmed
Subscriber content
Flash Advisory: Linux Kernel Privilege Escalation (CVE-2026-43503) – Public Exploit Available
Subscriber content
Flash Advisory: Miasma Malware Supply Chain Attack Targets npm and Go Ecosystems via Compromised Packages
Subscriber content
Flash Advisory: Active Phishing Campaign Targeting Hotels with Node.js Implant
Subscriber content
Flash Advisory: Mistic Backdoor Deployed in Multi-Sector Financially Motivated Attacks
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Law Enforcement Disrupts Amadey and StealC Malware Networks; 27M Credentials Recovered
Subscriber content
Flash Advisory: Cisco SD-WAN vManage Zero-Day Actively Exploited – Immediate Patching Required
Subscriber content
Flash Advisory: Malicious Edge extension abuses Native Messaging as bridge to malware
Subscriber content
Flash Advisory: Apple macOS Vulnerability Allows Non-Admin Security Tool Bypass
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: KDDI Breach Exposes 14.2 Million Managed Email Credentials
Subscriber content
Flash Advisory: CISA Warns of Active Exploitation of Critical Ubiquiti and Lantronix Vulnerabilities
Subscriber content
Flash Advisory: Cordyceps Campaign: Malicious Pull Requests Targeting Major Developer Tools and CI/CD Pipelines
Subscriber content
Flash Advisory: Healthtech Firm Xsolis Breach Exposes 1.4 Million Records via Phishing Attack
Subscriber content
Flash Advisory: Cisco Unified CM SSRF Vulnerability (CVE-2026-20230) Under Active Exploitation
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: Scattered Spider Members Convicted for Transport for London Breach; Critical Infrastructure Targeting Confirmed
Subscriber content
Flash Advisory: DifyTap Vulnerabilities in Dify Platform Enable Cross-Tenant AI Chat Exposure
Subscriber content
Flash Advisory: FFmpeg PixelSmash Vulnerability Enables RCE and DoS Across Multiple Applications
Subscriber content
Flash Advisory: Klue OAuth Breach Enables Salesforce Data Theft via 'Icarus' Campaign
Subscriber content
Flash Advisory: ShapedPlugin Supply Chain Attack Distributes Malware via Official WordPress Updates
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (CVE-2026-50656) Privilege Escalation Patch in Development
Subscriber content
Flash Advisory: Active Password-Stealing Attack Targeting 75,000 Fortinet Firewalls — Immediate Credential Rotation Required
Subscriber content
Flash Advisory: FortiBleed Leak Exposes 73,000+ Fortinet VPN Credentials Worldwide
Subscriber content
Flash Advisory: Microsoft Defender Zero-Day (RoguePlanet) Patch in Development
Subscriber content
Flash Advisory: 144 Mastra npm Packages Compromised in Supply Chain Attack—Immediate Dependency Review Required
Subscriber content
Flash Advisory: CISA Alerts: Joomla JCE Vulnerability (CVE-2026-48907) Under Active Exploitation
Subscriber content
Flash Advisory: Google Vertex AI SDK Vulnerability Enables Unauthorized Model Hijacking and Code Execution
Subscriber content
Flash Advisory: Critical Fortinet Sandbox Vulnerabilities Under Active Exploitation – Immediate Patching Required
Subscriber content
Flash Advisory: DragonForce Ransomware Abuses Microsoft Teams Infrastructure for C2 Communication
Subscriber content
Flash Advisory: Cardiac Monitor Manufacturer Breach Exposes Patient Data via Third-Party App Compromise
Subscriber content
Flash Advisory: Rokarolla Android Banking Trojan Targets 217 Financial Apps
Subscriber content
Flash Advisory: ClickFix Malware Campaigns Expand With New Loaders Targeting Education and Financial Sectors
Subscriber content
No reports match your filters. .