Cisco warns of max severity ISE zero-day exploited in attacks
Cisco ISE max-severity zero-day under active attack headlines this digest, alongside RatHat Android banking malware and a Flatpak-builder host RCE flaw.
In this digest
Security Intel Feed
Cyber Hose
Page 31 of 92
Read digest
Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day
A Cisco ISE zero-day under active exploitation leads this digest, joined by two WordPress plugin auth bypass CVEs allowing unauthenticated admin login.
In this digest
Post-Quantum Crypto Readiness Model Rates 57 Countries
A new arXiv paper introduces RSCM, rating 57 countries on post-quantum readiness and cryptographic sovereignty, plus CVE and LLM trust research.
In this digest
- arXiv paper proposes Readiness-Sovereignty Capability Model for post-quantum cryptography migration
- Photo Gallery by 10Web – Mobile-Friendly Image Gallery through 1.8.44 - Authentication Bypass
- Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks
Craft CMS Remote Code Execution via Signed Cookie
Multiple Craft CMS RCE flaws lead this digest, alongside a Tanium SQL injection and n8n sandbox escape vulnerabilities.
In this digest
Windows 11 KB5124008 update breaks domain trust for some users
Windows 11 update breaks domain trust, Iranian hackers deploy CHOSEN BRICK malware, and a Cisco ISE authentication bypass surfaces in this digest.
In this digest
Cisco FMC AJP flaw lets attackers run root commands (CVE-2026-76420)
A critical CVSS 9.0 Cisco FMC AJP flaw enables root command execution, while Spain's AEPD receives its first AI agent breach notification.
In this digest
VectraRAT malware offered as $250/month rental targeting Windows PCs
VectraRAT launches as a $250/month Windows RAT rental, Microsoft 365 hits widespread 502/503 errors, and Noodle RAT targets Windows and Linux systems.
In this digest
Pixel Modem Zero-Day Exploited in Targeted Attacks
Pixel modem zero-day under active exploitation headlines this digest, alongside Advantech ICS flaws and Iranian surveillance malware exposed by allied agencies.
In this digest
Critical ScreenConnect flaw now actively exploited in attacks
Active exploitation of a critical ScreenConnect flaw headlines this digest, alongside WordPress RCE flaws exposing 200k+ sites and a 280k-person medical breach.
In this digest
Acronis Backup plugin flaw exploited in the wild on cPanel and Plesk
Acronis patches a privilege-escalation flaw in cPanel and Plesk plugins after targeted exploitation, plus Oracle's 800+ CVE patch batch and more.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check