RAVEN Demonstrates Elasticsearch Data Theft and Persistent Backdoor
RAVEN tool exfiltrates Elasticsearch data and restores deleted access, affecting exposed or compromised clusters.
In this digest
Security Intel Feed
Cyber Hose
Page 58 of 93
Read digest
CISA warns of active exploitation of critical Windows IKE RCE flaw
Attackers exploit a critical Windows IKE Service Extensions RCE affecting Windows 10, 11, and Server systems.
In this digest
Chrome 151 and Firefox 154 Patch Dozens of Security Flaws
Chrome and Firefox patch dozens of vulnerabilities including critical buffer overflows, while two WordPress plugin CVEs round out this advisory run.
In this digest
Clop Exploits Critical PTC Windchill and FlexPLM Flaw for Data Theft
Clop ransomware exploits a critical PTC Windchill RCE flaw to steal data across manufacturing and defense, plus Slovakia's speed camera security scare.
In this digest
Oracle August 2026 CSPU Fixes 925 CVEs Across 23 Product Families
Oracle's August 2026 Critical Security Patch Update addresses 925 CVEs across 23 product families, including 154 critical patches.
Read digestFortiWeb RADIUS Admin Flaw Enables Unauthenticated GUI and CLI Access
FortiWeb RADIUS flaw allows unauthenticated admin access, Fortinet HTTP/2 DoS has public PoC, and Dell discloses 88 VPLEX vulnerabilities rated CVSS 9.8.
In this digest
CoSnitch flaws let one click hijack Microsoft Copilot Personal
Researchers disclosed CoSnitch flaws in Microsoft Copilot Personal enabling data exfiltration and prompt injection via crafted links.
In this digest
U.S. charges 17 Iranians over Mabna Institute cyber-theft campaign
A massive IRGC-linked cyber-theft campaign leads charges, while Microsoft Copilot Personal flaws and high-severity CVEs round out this digest.
In this digest
CISA Flags Microsoft IKE Service Extensions Double-Free Flaw
CISA adds a Microsoft IKE double-free RCE flaw to its KEV catalog amid active exploitation, plus Medusa ransomware and Dahua camera campaign updates.
In this digest
GitLab Issues Emergency Patch for Critical GraphQL Code-Injection Flaw
GitLab patched a critical GraphQL flaw allowing unauthenticated attackers to alter or delete public projects.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check