Citrix NetScaler CVE-2026-8452 exploited in the wild
Citrix NetScaler pre-auth RCE leads this run, alongside UAT-10147 AI-assisted web server campaigns and attacks on exposed AI infrastructure.
In this digest
Security Intel Feed
Cyber Hose
Page 52 of 93
Read digest
Hackers Probe Microsoft SharePoint RCE Chain After PoCs Published
SharePoint RCE chain with public PoCs draws active probing, CISA confirms 100+ U.S. water systems hit, and Bishop Fox unveils Veeam RCE.
In this digest
FBI disrupts proxy network used in Chinese espionage operations
FBI disrupts a Chinese espionage proxy network, Ubiquiti patches critical UniFi flaws, and NovaCookies targets hundreds of orgs.
In this digest
Cyberattack disrupts Boston Scientific's global operations
Boston Scientific's global operations disrupted by cyberattack, OpenAI bans Russian influence-operation accounts, Treasury pushes quantum-safe encryption.
In this digest
TranslatePress Flaw Enables Unauthenticated WordPress Account Takeover
A CVSS 9.8 TranslatePress flaw puts 400,000+ WordPress sites at risk of admin takeover, plus SonicWall NetExtender flaws and a 46-country RMM campaign.
In this digest
Core Werewolf Uses CoreRAT to Take Over Russian Windows Systems
Core Werewolf deploys the previously undocumented CoreRAT trojan against Russian public-sector and defense targets via Telegram phishing.
Read digestRussia Blocks DoH and DoT as Hacktivists Leak Spanish Personnel Data
Russia blocked DoH and DoT protocols while hacktivists leaked Spanish police and military data. Microsoft Teams suffered an outage in Asia-Pacific.
In this digest
Trestle SSTI vulnerability CVE-2026-54757 disclosed with CVSS 7.8
A CVSS 7.8 Trestle SSTI flaw leads this run, joined by Spring Security and Doorkeeper vulnerabilities.
In this digest
Hidden Email Prompts Can Manipulate Microsoft Copilot Summaries
Hidden prompts can hijack Microsoft Copilot email summaries, while a CVSS 9.9 NVIDIA OpenShell flaw and GTA VI extortion leak round out this digest.
In this digest
Attackers Exploit Zimbra Command-Injection Flaw for Unauthenticated
Zimbra RCE under active exploitation headlines this run, alongside a Norway government DDoS and Kaltura HTML5 player flaws.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check