Critical CVE-2026-103110 in Pexip Infinity Scores CVSS 9.8
Pexip Infinity suffers a critical vulnerability with CVSS 9.8, affecting multiple versions and risking widespread impact.
In this digest
Security Intel Feed
Cyber Hose
Page 18 of 92
Read digest
Pwnd Blaster: Creative Katana V2X speaker flaws enable covert spying
Unauthenticated Bluetooth access to Creative Katana V2X speakers lets attackers flash malicious firmware for covert audio monitoring or USB keystroke injection.
In this digest
Critical Fireware OS Code Injection CVE-2026-86131 with CVSS 9.2
A critical code injection vulnerability in WatchGuard Fireware OS allows remote code execution via BOVPN over TLS.
In this digest
ControlPlane chains 4 bugs for unauthenticated RCE in OpenBao
A four-bug exploit chain allows unauthenticated attackers full RCE in widely used OpenBao and unpatched HashiCorp Vault.
In this digest
French Tax Data Theft via Stolen Staff Passwords Went Undetected for
Over 350,000 French taxpayers and 250,000 businesses had tax data stolen via stolen staff passwords, undetected for seven weeks.
In this digest
CISA warns of critical command injection flaw in VIVOTEK cameras
CISA flags a CVSS 10.0 VIVOTEK camera flaw with a public PoC, a critical MikroTik RouterOS RCE, and 101 malicious npm packages hitting 490K downloads.
In this digest
Apple fixes exploited graphics-engine bug (CVE-2026-86950) in iOS
Apple patched a graphics engine flaw in iOS 26, iPadOS 26 and macOS 26 that was exploited in targeted attacks on millions of devices.
In this digest
Hackers Weaponize ChatGPT Custom GPTs in ClickFix Attacks Delivering
Attackers use ChatGPT Custom GPTs to trick Windows users into installing a RAT via ClickFix attacks with remote access and surveillance.
In this digest
Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud
Storm-3168 wiped Azure resources in a 7-minute destructive attack, Kiteworks patched a critical flaw, and a CVSS 9.9 Dassault vulnerability surfaced.
In this digest
Apple CoreGraphics zero-day exploited in targeted attacks
An Apple CoreGraphics zero-day exploited in targeted attacks headlines this run, alongside an MCP Python SDK flaw enabling OAuth credential theft.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check