CVE-2026-77806: Unauthenticated SPIP RCE Exploited in the Wild
An unauthenticated SPIP RCE is exploited in the wild, Apollo Global confirms a breach exposing SSNs, and agentic AI automates web server attacks.
In this digest
Security Intel Feed
Cyber Hose
Page 56 of 93
Read digest
Microsoft Entra ID RCE flaw exploited in the wild
Microsoft Entra ID RCE leads this run, alongside FTP-delivered Windows RATs, a fake Gemini Vidar campaign, and Russian OAuth account hijacking.
In this digest
Escape found stored XSS in two AI chatboxes via Markdown rendering
Stored XSS in two AI chat products headlines this run, plus Peer2Profit exposing internal networks and a MISP parser confusion CVE.
In this digest
WPForms Pro Unauthenticated Stored XSS (CVE-2026-18409)
A CVSS 7.2 unauthenticated stored cross-site scripting flaw in WPForms Pro through 2.0.0.2 leads this digest.
In this digest
Critical Microsoft Entra ID RCE flaw exploited in the wild
A critical Microsoft Entra ID remote-code-execution vulnerability is being actively exploited, affecting Entra ID customers.
Read digestSPIP Before 4.4.20 Hit by Unauthenticated RCE CVE-2026-77647
SPIP unauthenticated RCE under active exploitation headlines this digest, alongside SynkLoader malware research and a critical EverShop account takeover flaw.
In this digest
Attackers Poisoned Three Rust Crates With Build-Time Malware
Three Rust crates were poisoned with build-time malware in a supply chain attack, while a CVSS 9.1 Centrifugo flaw and a new AI agent framework also surfaced.
In this digest
AI-generated scripts target internet-exposed Siemens S7 PLCs
AI scripts target Siemens S7 PLCs in critical infrastructure, Russian hackers abuse Google OAuth, and a CVSS 9.3 Omada gateway flaw heads this digest.
In this digest
CISA Flags Exploited TrueConf Server Flaws Used in Head Mare Attacks
Head Mare exploits TrueConf Server flaws to deploy backdoors, affecting organizations using vulnerable versions.
In this digest
Critical isolated-vm flaw enables sandbox escape and potential host
A critical isolated-vm flaw allows sandbox escape and host control-flow hijacking in AI-related projects and others.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check