CVE-2026-14157: Critical ASUS Router format string flaw (CVSS 9.4)
A CVSS 9.4 format-string vulnerability in ASUS routers headlines this digest, alongside a debug-code flaw in select models.
In this digest
Security Intel Feed
Cyber Hose
Page 17 of 92
Read digest
Kiteworks Email Protection Gateway flaw exposes encrypted mail
A critical certificate assignment flaw in Kiteworks Email Protection Gateway exposes encrypted emails and account access.
In this digest
Pentagon breach exposed unencrypted data of 3.1M US military personnel
Pentagon breach exposed unencrypted SSNs and personal data of 3.1M military personnel. Cisco SD-WAN auth bypass exploited, Apple code execution flaw flagged.
In this digest
Over 543,000 valid credentials still exposed in public GitHub
Over 543,000 valid GitHub credentials remain exposed, while attackers exploit a patched Zimbra flaw and 32 malicious browser extensions spy on thousands.
In this digest
Zimbra command injection flaw CVE-2026-73570 under active exploitation
Zimbra mail servers under active exploitation via unauthenticated command injection, plus Star Blizzard phishing and Chrome 154 patches.
In this digest
Cisco patches actively exploited SD-WAN Manager auth bypass zero-day
Cisco patches a CVSS 9.8 SD-WAN zero-day under active exploitation, PaperCut MF zero-days reach a domain controller, and supply chain attacks target developers.
In this digest
China-nexus UAT-11587 targets Asian govts with Antino backdoor
A China-nexus APT deploys a novel Rust backdoor via Microsoft 365 C2, FBI seizes $17B in scam crackdown, and Apache MINA SSHD flaws enable auth bypass.
In this digest
WaterISAC flags exposed OT, PLCs as top water sector cyber threats
WaterISAC warns internet-exposed OT and PLCs are the water sector's biggest cyber risk amid rising attacks this summer.
In this digest
South Africa Air Traffic Control Hit by Ransomware-Linked Malware
ATNS, managing ~10% of world's airspace, found ransomware-linked malware in OT systems; plus Apache PLC4X CVSS 9.2 ICS flaw and Pgpool-II vulnerabilities.
In this digest
Pexip Infinity Input Validation Flaw Leads to Remote Code Execution
A critical CVSS 9.8 input validation flaw in Pexip Infinity allows remote code execution, posing severe risk to affected users.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check