Judge rules Flock plate search unconstitutional 'mass surveillance'
A federal judge called warrantless Flock ALPR searches 'indiscriminate mass surveillance,' while AWS Loom flaws hit CVSS 10.0 and Exchange EoP lands at 8.8.
In this digest
Security Intel Feed
Cyber Hose
Page 15 of 92
Read digest
Possible bypass of NetScaler pitboss fix as patched honeypots crash
Patched NetScaler honeypots crash suggesting pitboss bypass, Dell patches two CVSS 10.0 CSM flaws, GitLab fixes critical AI Gateway sandbox escape, and more.
In this digest
Thales SConnect RCE Exposes SWIFT Banking and Government Users
A critical drive-by RCE in Thales SConnect middleware hits SWIFT and government users, plus U-Boot Secure Boot bypass and GitLab AI Gateway RCE.
In this digest
Red Hat Satellite flaw exposes host root passwords via Foreman
A CVSS 9.1 Red Hat Satellite flaw exposes root passwords, plus cPanel RCE flaws and a new macOS backdoor.
In this digest
- Red Hat Satellite flaw CVE-2026-96659 exposes host root passwords via Foreman template preview endpoints
- cPanel & WHM flaws allow root command execution and admin session hijacking
- New CloudSyncD macOS Backdoor Delivered via Fake Zoom Installer
Azure API Connections flaws enable cross-tenant compromise of backends
Azure API Connections cross-tenant flaws headline this run, alongside TIKTOUK credential harvesting and Dell CVSS 10 storage array patches.
In this digest
Warlock ransomware expands SharePoint attacks targeting critical infra
Warlock ransomware hits critical infrastructure via SharePoint flaws; Microsoft's X account hijacked for crypto scam; Milk Dragon phishing kit bypasses MFA.
In this digest
US Treasury sanctions 10 tied to Tren de Aragua ATM jackpotting scheme
US Treasury sanctions 10 linked to Tren de Aragua ATM jackpotting causing $40.7M losses across 1,500+ incidents targeting US banks and ATMs.
In this digest
Critical FortiMail Zero-Day Exploited in Attacks
A CVSS 9.8 FortiMail zero-day added to CISA's KEV catalog leads this run, plus high-severity WordPress plugin CVEs.
In this digest
Apache HTTP Server 2.4.69 fixes 20 flaws including code execution
Apache HTTP Server 2.4.69 patches 20 security flaws, a California owner is arrested for $300M GPU smuggling, and two high-CVSS CVEs round out this run.
In this digest
FELG Dent breach exposes ~2 million patient records in Poland
A breach at Polish dental software vendor FELG Dent exposes ~2M patient records, while a critical Thales SConnect RCE draws attention.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check