Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warns of a Secure Email Gateway zero-day enabling root command execution, plus a Chrome-Windows zero-day chain deployed by China-linked hackers.
In this digest
Security Intel Feed
Cyber Hose
Page 33 of 92
Read digest
Root RCE Zero-Day in Cisco Secure Email Gateway Actively Exploited
A root RCE zero-day in Cisco Secure Email Gateway is under active exploitation, plus a Revolut data breach and several newly disclosed CVEs.
In this digest
Weights & Biases wandb Path Traversal via File Download
A path traversal flaw in widely-used ML tool wandb headlines this digest, alongside multiple CVEs and a Supreme Court USPS ruling.
In this digest
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
Sandworm chains Cisco flaws to deploy Cyclops Blink botnet, while Casdoor and IBM MQ disclose critical vulnerabilities.
In this digest
Red Heron Exploits Gitea RCE, Hits 13 Orgs Across Six Countries
Red Heron exploits Gitea RCE to compromise 13 orgs across six countries, plus a new DDRop attack breaks Intel TDX and AMD SEV-SNP confidential computing.
In this digest
Russian AI agents exploit PaperCut flaws across 48 countries
A Russian-linked attacker used AI agents to exploit PaperCut flaws across 48 countries, plus CISA warns on critical GitLab flaw and Vite dev servers targeted.
In this digest
Personal, Financial Info Exposed in Revolut Data Breach
Revolut breach exposes personal and financial data, a malicious Twitch extension hits 30,000 users, and a new Linux kernel privilege-escalation flaw emerges.
In this digest
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
A critical GitLab path traversal flaw is exploited in the wild, Chinese hackers target a Tencent one-click RCE, and Microsoft's September updates break RDS.
In this digest
Microsoft September updates break USB audio on some Windows 11 PCs
Microsoft's September security updates break USB audio on some Windows 11 24H2 PCs, alongside a Revolut breach and worm-like ScreenConnect exploit.
In this digest
CISA: Hackers now exploit max severity GitLab flaw in attacks
CISA warns of active exploitation of a max-severity GitLab flaw, plus AsyncRAT injection techniques and multiple IoT and media library CVEs.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check