Attackers Reached Polish CHP Plant OT via Private APN, Shut Turbine
Attackers shut down a Polish CHP plant via a private APN, Mozilla replaced a Firefox GPG key, and new CVEs hit Crafty Controller and Grafana.
In this digest
Security Intel Feed
Page 65 of 93
Attackers shut down a Polish CHP plant via a private APN, Mozilla replaced a Firefox GPG key, and new CVEs hit Crafty Controller and Grafana.
In this digest
A CVSS 9.8 SAP NetWeaver memory corruption flaw headlines this run, alongside a WhatsApp phishing campaign abusing valid SSL certificates.
In this digest
A CVSS 8.4 ASUS pointer dereference flaw and a Wildfly arbitrary file read round out this digest.
In this digest
Seven SAP vulnerabilities lead this digest, including a CVSS 8.8 privilege escalation flaw in SAP ABAP Developer Tools.
In this digest
Ghostjacking hijacks AI agents via poisoned logs on Cloudflare, Datadog, and Sentry; Croatia arrests a hacker; CVSS 9.9 ERPNext flaw and more CVEs.
In this digest
Gunra ransomware exploits Fortinet VPN flaws to bypass MFA across critical sectors, while multiple Dokploy RCE flaws rated CVSS 9.9 round out this digest.
In this digest
Hunt.io reconstructs a toolkit targeting Ukrainian IP cameras, while Picus finds Play ransomware evaded most security controls in 2026 testing.
In this digest
DarkSword iOS exploit kit hits 180 web properties, Gunra ransomware exploits Fortinet VPN flaws, and Storm-1175 deploys StormEncryptor ransomware.
In this digest
INC Ransomware exploits SonicWall SMA1000 zero-days for network access, while attackers target Progress LoadMaster and Kimsuky deploys local AI tooling.
In this digest
A Metabase SQL injection zero-day and a critical Progress Kemp LoadMaster flaw lead this digest of active exploits and breaches.
In this digest
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check