GitLab Memory-Safety Flaws in Oj JSON Parser Enable Remote Code
Two memory-safety bugs in GitLab's Oj JSON parser allow remote code execution by authenticated users, risking source code and secrets exposure.
In this digest
Security Intel Feed
Cyber Hose
Page 78 of 93
Read digest
Malvertising campaign builds malware in browser memory via JavaScript
Malicious sites use JavaScript to assemble malware locally in browser memory, evading detection and targeting crypto investors.
Read digestCritical Fastjson 1.x RCE Vulnerability CVE-2026-16723 Exploited
A critical unauthenticated RCE in Fastjson 1.x is actively exploited with no patch available, affecting major sectors globally.
In this digest
Cl0p Affiliates Exploit PTC Windchill and FlexPLM for Unauthenticated
Cl0p-linked actors exploit PTC Windchill and FlexPLM flaws for unauthenticated remote code execution in key manufacturing sectors.
In this digest
Researcher Publishes RCE PoC for GitLab 18.11.3 Allowing
A new PoC enables authenticated users to execute commands remotely on multiple GitLab versions without admin rights.
In this digest
Knot Resolver before 6.4.1 vulnerable to remote code execution
Knot Resolver versions before 6.4.1 have a heap buffer overflow in DNS-over-QUIC allowing remote code execution without user interaction.
In this digest
Hermes AI agent automates post-exploitation in Thai Finance Ministry
Threat actors used Hermes AI to automate post-exploitation in Thailand's Ministry of Finance attack, targeting multiple internal systems.
In this digest
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Attackers hijack hotel Wi-Fi DNS worldwide to redirect Microsoft 365 logins to phishing sites and bypass MFA using OAuth token theft.
In this digest
Zero-day vulnerability in Check Point SmartConsole actively exploited
A zero-day flaw in Check Point SmartConsole allows attackers to bypass authentication and gain elevated privileges.
In this digest
Bing Images SVG Flaws Allowed Remote Code Execution as SYSTEM
Crafted SVG files enabled remote code execution as SYSTEM on Microsoft Bing Images servers without authentication.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check