China-Linked Fire Ant Compromises Cisco Routers to Steal Credentials
Fire Ant targets Cisco routers for credential theft, Spring Ring abuses Teams voice phishing, and ValleyRAT spreads via adware across Asia.
In this digest
Security Intel Feed
Cyber Hose
Page 48 of 93
Read digest
Critical Microsoft UFO Flaw Enables Unauthenticated Android Device
A critical Microsoft UFO flaw allows unauthenticated remote control of connected Android devices, risking data and device integrity.
In this digest
Blind Eagle Campaign Exposes RATs and Phishing Infrastructure
A Blind Eagle-linked campaign targeting Colombia revealed remote-access trojans, phishing kits, and operator infection.
Read digestContextLeak Uses Malicious Tools to Exfiltrate LLM Agent Context
Researchers reveal ContextLeak, a new attack that steals LLM agent context via malicious external tools.
In this digest
CVE-2026-77956: CVSS 10.0 RCE in AshAi via prompt template evaluation
A CVSS 10.0 remote code execution flaw in AshAi headlines this run, alongside a D-Link buffer overflow advisory.
In this digest
Critical CVEs in D-Link DIR-825M Firmware Components
Two critical CVEs with CVSS 8.6 affect D-Link DIR-825M firmware, posing significant risks to device security.
In this digest
Critical CVE-2026-15369 WooCommerce flaw allows unauthenticated RCE
A critical CVSS 9.8 vulnerability in WooCommerce enables unauthenticated remote code execution, posing severe risks to many e-commerce sites.
In this digest
AVideo Flaw Exposes Stream Credentials Without Authentication
An AVideo advisory reveals unauthenticated stream credential exposure, plus a SiYuan stored XSS fix and a cross-tenant access CVE.
In this digest
Rhysida claims 5.79TB data theft from Berlin government systems
Rhysida claims a massive Berlin government data theft, infostealers hijack Claude sessions, and high-severity CVEs hit SiYuan and AVideo.
In this digest
Critical Icollect flaws enable unauthenticated file read and SSRF
A CVSS 9.3 Icollect file-read and SSRF flaw leads this run, joined by Profile Builder and BookingPress vulnerabilities.
In this digest
- CVE-2026-77012 — CVSS 9.3 — Icollect through 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal
- CVE-2026-76548 — CVSS 8.2 — Profile Builder before 4.0.1 - Unauthenticated Unpublished Content and Media Modification
- CVE-2026-76586 — CVSS 7.5 — BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check