Mathspace data breach affects over 1 million users in Australia, NZ
A CVSS 10.0 Metabase flaw enabled a breach of over 1 million Mathspace users, plus a 389 Directory Server heap overflow and a ScreenConnect flaw.
In this digest
Security Intel Feed
Cyber Hose
Page 41 of 93
Read digest
Lenovo ID flaw allowed hackers to break into 5,000 Dropbox accounts
A Lenovo login flaw let attackers access about 5,000 Dropbox accounts linked to Lenovo IDs.
In this digest
Hackers exploit new MikroTik RouterOS flaws to hijack routers
New MikroTik RouterOS vulnerabilities are actively exploited by hackers to hijack routers, posing widespread risk to network security.
In this digest
N-able patches max severity N-central flaw amid ongoing attacks
N-able ships a fix for a max-severity N-central flaw under active attack, plus PaperCut RCE exploitation and a 12-year-old PostgreSQL code execution bug.
In this digest
CVE-2026-86271: Missing authorization flaw in FluentCMS disclosed
A missing authorization vulnerability in FluentCMS with a public exploit headlines this digest alongside research on LLM phishing and ransomware detection.
In this digest
MediaTek patches Audio HAL privilege escalation across many chipsets
MediaTek patches Audio HAL privilege escalation across dozens of chipsets, plus a BEC heist, Telerik RCE, and Samsung Walrus flaw in this digest.
In this digest
SQL injection flaws disclosed in itsourcecode Sales and Inventory
Multiple SQL injection vulnerabilities with public exploits headline this digest, alongside access control and certificate revocation flaws.
In this digest
Multiple libcurl vulnerabilities including HTTP/2 server push UAFA
Several critical libcurl flaws affect connection reuse, HTTP/2 server push, and OpenSSL integration, posing risks to many applications.
In this digest
Attackers steal METR API key via exposed agent dashboard, burn
Attackers exploited an exposed METR agent dashboard to steal an API key and rack up $600,000 in fraudulent AI usage charges.
In this digest
ASUS Control Center Flaw Grants Full System Admin Control
An ASUS Control Center vulnerability enabling full admin takeover headlines this run, plus h3 path traversal flaws and mysterious MikroTik router compromises.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check