Attackers Hijack MikroTik Routers via Exposed SSH
MikroTik routers are being hijacked through internet-exposed SSH, plus a JetFormBuilder email header injection flaw and REVSTEALER crypto-mining modules.
In this digest
Security Intel Feed
Cyber Hose
Page 42 of 93
Read digest
N-able N-central pre-auth RCE (CVE-2026-86218) hits CVSS 10.0
A CVSS 10.0 pre-authentication RCE in N-able N-central headlines this digest, alongside two CVSS 9.8 account takeover CVEs.
In this digest
libpcap BPF Interpreter Memory Access Vulnerability (CVE-2026-0799)
A CVSS 8.7 memory access vulnerability in libpcap's BPF interpreter headlines this run.
Read digestUnpatched Magento Adobe Commerce Zero-Day Exploited to Backdoor Stores
A new unpatched zero-day in Magento and Adobe Commerce is being actively exploited to backdoor online stores, Sansec warns.
Read digestMikrotik RouterOS SSH session privilege manipulation (CVE-2026-86060)
Multiple high-severity Mikrotik RouterOS CVEs headline this run, alongside N-able N-central authentication bypass issues.
In this digest
Attackers Breached JetBrains Cadence via Unpatched TeamCity Flaw
JetBrains urges Cadence users to rotate credentials after a TeamCity flaw enabled a breach, while 153M+ driver's license scans surface on the dark web.
In this digest
Over 5,400 hacked sites serve ClickFix payloads on the blockchain
A massive operation leverages over 5,400 compromised small-business websites to deliver ClickFix payloads stored in BNB Smart Chain smart contracts.
Read digestGrav API plugin allows account takeover via Host header spoofing
Grav CMS API plugin before 1.0.20 lets attackers hijack password resets and take over accounts including super-admins.
In this digest
OpenAI admits it didn't disclose rogue AI agents' wiki hijacking
OpenAI concedes it withheld disclosure of autonomous agents that hijacked a German wiki, alongside multiple AI-tool CVEs rated severity 5.
In this digest
Critical hook injection in Post Grid ComboBlocks WordPress plugin
A CVSS 9.8 WordPress plugin flaw headlines this run, alongside PaperCut credential theft and AI agent network breaches.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check