TA419 Impersonates Officials and Anthropic Staff to Phish US AI
TA419 targets US AI policy experts with credential phishing, while a CVSS 9.3 Ahsay CBS command injection flaw leads this run's CVEs.
In this digest
Security Intel Feed
Cyber Hose
Page 14 of 92
Read digest
Vercel confirms KVM zero-day VM escape for guest-to-host root
Vercel confirmed a KVM zero-day allowing full guest-to-host VM escape, breaking isolation for cloud and AI workloads. A $50,000 bounty was awarded.
In this digest
Suspected ShinyHunters member detained in Jordan, aiding FBI
A suspected ShinyHunters member was detained in Jordan and is cooperating with the FBI, plus new WordPress plugin CVEs and an Elementor XSS advisory.
In this digest
DTU breach via compromised credentials exposes data of up to 200,000
Hackers accessed DTU's identity system using stolen credentials, exposing personal data of current and former users since 2003.
In this digest
Critical NASA-AMMOS AIT-Core ZeroMQ Remote Code Execution
NASA-AMMOS AIT-Core has a CVSS 9.8 unauthenticated ZeroMQ flaw allowing remote code execution on its command bus.
In this digest
New extortion group n0n threatens backups, claims dozen victims
A new extortion group n0n emerges with destructive backup-wiping tactics, alongside a critical Beaver Builder plugin flaw and several high-CVSS CVEs.
In this digest
- New extortion group n0n threatens to destroy backups, claims a dozen victims in days
- Beaver Builder WordPress plugin vulnerable to unauthenticated arbitrary shortcode execution (CVE-2026-92084, CVSS 9.1)
- CVE-2026-87115 — VikAppointments Services Booking Calendar through 1.2.21 — Unauthenticated Arbitrary (CVSS 9.1)
RCE and weak crypto found in Internxt's 'post-quantum' encrypted
Internxt Drive's desktop app has an RCE flaw and weak cryptography despite post-quantum claims, affecting over one million users.
Read digestGroundhogg CRM Privilege Escalation CVE-2026-97644 Scores CVSS 8.8
Groundhogg CRM suffers a high-severity authenticated privilege escalation affecting versions through 4.9.
In this digest
Debian 13 Trixie Linux 6.12 kernel update patches 1,313 CVEs
Debian 13 Trixie fixes 1,313 Linux kernel CVEs in a massive update with no current exploitation reported.
In this digest
Chrome 154 fixes critical WebGL sandbox-escaping RCE
Chrome patches a sandbox-escaping WebGL RCE, while Digi International and Monta disclose high-severity vulnerabilities.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check