InfraTrust warns attackers target network management systems with
Attackers exploit critical vulnerabilities in network management platforms like Cisco FMC and SonicWall SMA 1000, enabling ransomware and espionage.
In this digest
Security Intel Feed
Cyber Hose
Page 25 of 92
Read digest
Public Exploit Released for Unpatched Ubuntu AF_UNIX Container Escape
A public exploit targets an unpatched Ubuntu Linux kernel flaw enabling container escape to host root on multiple LTS versions.
In this digest
NVIDIA patches critical hard-coded credentials in Linux
NVIDIA fixes 14 vulnerabilities including a critical CVSS 9.8 flaw with hard-coded credentials enabling remote attacks.
In this digest
Arista patches actively exploited VeloCloud Orchestrator zero-day
Arista urges immediate patching of a critical zero-day in VeloCloud Orchestrator exploited in the wild, affecting SD-WAN management.
In this digest
ChatGPT Computer History for macOS exposes unencrypted user activity
OpenAI's ChatGPT macOS app stores unencrypted activity logs accessible to local processes, raising infostealer risks.
In this digest
Critical stack overflow in Fast FAC1203R Gigabit Edition router
A critical stack-based buffer overflow in Fast FAC1203R Gigabit Edition routers is remotely exploitable without authentication.
In this digest
jackson-databind quadratic forward-reference completion flaw enables
A high-severity DoS flaw in jackson-databind affects many versions and can cause quadratic CPU usage via JSON deserialization.
In this digest
Macfinger ClickFix campaign targets macOS users via injected scripts
A new ClickFix campaign dubbed Macfinger is delivering AMOS Stealer to macOS users through malicious scripts on legitimate websites.
In this digest
Rogue MFA providers can steal Microsoft Entra passwords during logins
A rogue external MFA provider attack on Microsoft Entra headlines this run, alongside Fortinet stealth patches and 80,000+ AI relay servers.
In this digest
F5 BIG-IP APM zero-day CVE-2026-94127 added to CISA KEV
F5 BIG-IP APM zero-day RCE hits CISA KEV with a September 25 deadline, while Chinese APT campaigns and a critical WordPress LFI flaw also demand attention.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check