SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited
CISA adds critical SharePoint and MikroTik RouterOS vulnerabilities to KEV catalog with active exploitation observed.
In this digest
Security Intel Feed
Cyber Hose
Page 22 of 92
Read digest
Researcher Finds Microsoft Titan Auth Flaw Exposing 17.3T Records
A JWT auth flaw in Microsoft's internal Titan analytics service exposed an estimated 17.3 trillion records, plus a wave of OpenClaw CVEs.
In this digest
Kiteworks warns of imminent zero-day attack, urges server shutdown
Kiteworks urges customers to shut down file-transfer servers over credible law-enforcement threat of an imminent zero-day attack.
Read digestCritical CVE-2026-97230 in IO::Socket::SSL::SelfCertificate with CVSS
A critical vulnerability in IO::Socket::SSL::SelfCertificate for Perl with CVSS 9.8 involves malware and severe risk.
In this digest
OnePlus 15 OxygenOS flaws let zero-permission apps gain root access
Two OxygenOS flaws could let zero-permission apps execute code as root on OnePlus and OPPO devices, plus a CVSS 9.3 X-SpringBoot flaw and PHP CVEs.
In this digest
Elementor CSRF flaw lets attackers create admin accounts on 2M sites
A CSRF flaw in Elementor can create admin accounts on up to 2M WordPress sites, plus a CVSS 9.4 GLPI RCE and several other high-severity CVEs.
In this digest
CISA adds exploited WSO2 and Adobe Commerce flaws to KEV catalog
CISA adds actively exploited WSO2 and Adobe Commerce flaws to its KEV catalog, plus new authentik MFA bypass and RabbitMQ OAuth2 secret exposure CVEs.
In this digest
Compromised GitHub Actions Re-Enabled, Resumed Mini Shai-Hulud
Compromised GitHub Actions resumed malware execution, Samsung MagicINFO exploited for cryptomining, Zimbra CVSS 9.8 RCE, and SolarWinds ARM RCE detailed.
In this digest
Kiteworks warns of imminent zero-day attack; researcher urges taking
Kiteworks customers including government and enterprises face imminent zero-day extortion attack; servers urged offline to prevent data theft.
In this digest
CISA adds two actively exploited Check Point flaws to KEV catalog
Two actively exploited Check Point VPN and management flaws headline this run, alongside critical GitLab CI/CD patches and HPE networking advisories.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check