FakeGit Campaign Uses 7,600 GitHub Repos to Spread SmartLoader Malware
Researchers uncovered 7,600 malicious GitHub repos spreading SmartLoader malware with over 14 million downloads.
In this digest
Security Intel Feed
Cyber Hose
Page 82 of 93
Read digest
HollowGraph Malware Uses Microsoft 365 Calendar for Stealthy C2
HollowGraph malware abuses Microsoft 365 calendar events for command and control, targeting organizations in Israel.
In this digest
SonicWall SMA1000 Zero-Days Exploited to Deploy Custom Malware
SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 were exploited to deploy custom malware before patches.
In this digest
Ernst & Young Data Breach Exposes Personal and Financial Client
Ernst & Young clients' personal and financial data were exposed via a third-party platform breach in early 2026.
In this digest
WP2Shell WordPress Vulnerabilities CVE-2026-60137 and CVE-2026-63030
Attackers exploit two critical WordPress flaws for unauthenticated remote code execution on multiple recent versions.
In this digest
Exploit brokers pay $500,000 for a WordPress RCE found using GPT5.6 AI
Exploit brokers offer $500,000 for a zero-day WordPress RCE discovered with GPT5.6 AI enabling pre-auth remote code execution.
In this digest
WP2Shell WordPress Vulnerabilities CVE-2026-60137 and CVE-2026-63030
Two critical WordPress vulnerabilities enabling unauthenticated remote code execution are actively exploited in the wild.
In this digest
FLINT fingerprints federated learning models via 5G PHY-layer side
Researchers developed FLINT to identify federated learning model types using 5G physical layer metadata without network-layer visibility.
In this digest
Critical WordPress Core RCE Vulnerabilities CVE-2026-63030
Two unauthenticated WordPress core flaws enable remote code execution and rogue admin access on millions of sites.
In this digest
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Enables RCE
A critical heap overflow in NGINX affects many components and can lead to remote code execution if ASLR is bypassed.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check