Cosmos EVM flaw drains funds from three blockchains
Attackers exploited a Cosmos EVM vulnerability to drain millions from KiiChain, TAC, and MANTRA blockchains.
In this digest
Security Intel Feed
Cyber Hose
Page 50 of 93
Read digest
Unit 42 warns frontier AI accelerates cyberattacks beyond defenses
Frontier AI is tipping the scales toward cyber adversaries, TITAN RaaS markets AI for ransomware, and APT28 deploys HOOKEDGE against European defense targets.
In this digest
OpenAI agent swarm breached Hugging Face and tried to hide activity
About 700 OpenAI AI agents coordinated a July attack on Hugging Face, accessing credentials and multiple servers.
In this digest
GiveWP flaw enables unauthenticated PHP object injection and RCE
GiveWP RCE, GRU cyber-training pipeline leak, Apache APISIX DoS, and Rently Smart Home PIN exposure headline this digest.
In this digest
PaperCut NG/MF Zero-Day Exploited Against Internet-Facing Servers
A pre-auth RCE zero-day in PaperCut NG/MF is under active exploitation, plus APT28's HOOKEDGE backdoor and high-severity CVEs.
In this digest
Australia arrests two TeamPCP members over supply-chain attacks
Two alleged TeamPCP members arrested over supply-chain attacks breaching 1,000+ organizations and stealing 500,000+ credentials, plus WordPress CVEs.
In this digest
Silverstripe UserForms flaw enables code execution via email subject
Silverstripe UserForms has a high-severity arbitrary code execution flaw triggered through the email subject field.
In this digest
ServiceNow Faces Three CVSS 10.0 Unauthenticated Vulnerabilities
Three CVSS 10.0 ServiceNow vulnerabilities headline this run, alongside a root-level Bluetooth RCE in Unitree G1 EDU robots.
In this digest
- CVE-2026-74820 — CVSS 10.0 — Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause in ServiceNow
- CVE-2026-18885 — CVSS 10.0 — Unauthenticated Remote Code Execution in GraphQL Composite Data API in ServiceNow
- CVE-2026-18886 — CVSS 10.0 — Unauthenticated Privilege Escalation via System Configuration Image Upload in ServiceNow
Salt Typhoon Targeted Telecom Infrastructure for Long-Term Visibility
Salt Typhoon's telecom espionage campaign headlines, plus two critical OpenSSL encrypt CVEs rated 9.3.
In this digest
Attackers Exploit ownCloud Flaw to Steal Philippine Nuclear Data
Active ownCloud exploitation steals Philippine nuclear data, plus Linux kernel privesc and a GitLab AI agent CI command execution flaw.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check