PwnEscape flaw in Linux kernel lets guest VMs read host memory
PwnEscape (CVE-2026-99999) lets guest VMs leak host memory via Linux kernel networking; Unit 42 tracks AI espionage on government Linux systems.
In this digest
Security Intel Feed
Cyber Hose
Page 8 of 92
Read digest
Cyber incident at FLC halts Fehmarn Belt tunnel construction
FLC cyber incident halts Denmark-Germany tunnel construction, Burger King Japan breach exposes 11M records, and hackers overheat French supermarket fridges.
In this digest
Attackers Deploy Memory-Resident PEERSTITCH Malware on FortiGate
Attackers exploited Fortinet flaws to steal data from 500+ firewalls and deploy stealthy PEERSTITCH malware with no disk footprint.
In this digest
Langflow authenticated RCE flaw under active exploitation
Active exploitation of a critical Langflow RCE headlines this run, alongside a major utility breach and a GitHub credential-theft campaign surge.
In this digest
Palo Alto warns of actively exploited PAN-OS root RCE zero-day
A PAN-OS root RCE zero-day under active exploitation headlines this run, alongside EU supermarket fridge attacks and Microsoft AD FS fixes.
In this digest
Aeza bulletproof hosting survives sanctions under seven new identities
A sanctioned Russian hosting provider rebrands under seven identities, while a Palo Alto Cloud NGFW zero-day surfaces.
In this digest
Palo Alto patches actively exploited PAN-OS RCE zero-day CVE-2026-0322
PAN-OS RCE zero-day under active exploitation leads this run, alongside a Cisco email gateway KEV addition and Claude Code credential theft research.
In this digest
curl 8.23.0 patches 24 vulnerabilities including HTTP/2 use-after-free
curl 8.23.0 fixes 24 flaws across 30 billion installations, while attackers exploit a Nextcloud Collabora flaw to plant web shells.
In this digest
Microsoft seizes domains behind 1B+ message phishing ecosystem
Microsoft and Health-ISAC disrupt a massive phishing kit marketplace, plus FBI raids on DPRK laptop farms and a malicious npm package worm.
In this digest
XBOW Built $250K Chrome Full-Chain Exploit With GPT-5.6 AI Agents
AI agents built a full-chain Chrome exploit in six days, iOS exploit kits compromise iPhones via web visit, and Chrome/Firefox patch 114 flaws.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check