GhostLock: 15-year-old Linux flaw enables root on most distros
The GhostLock root-and-container escape, CISA's Langflow and ColdFusion patch orders, a max-severity UniFi OS flaw, and the DHS IG's CISA probe.
In this digest
Security Intel Feed
Cyber Hose
Page 88 of 93
Read digest
Critical Gitea auth bypass under active exploitation
Exploited Gitea and Cisco SD-WAN flaws, the Drupal core SQLi, RedWing Android bank-fraud MaaS, June Patch Tuesday, and a Tenda router backdoor.
In this digest
Kaspersky maps the Q1 2026 industrial automation threat landscape
Kaspersky's Q1 2026 ICS threat report, and Keyfactor's $1B+ raise for AI and post-quantum identity security.
In this digest
16-year-old Linux KVM flaw lets guest VMs escape to the host
The Januscape KVM escape, Iran's new Cavern C2 framework, probing of a critical Gitea Docker flaw, Armored Likho's hybrid campaigns, and a Tenda backdoor.
In this digest
EU official's phone infected with Pegasus spyware
Pegasus on an EU MP's phone, an Opera GX auto-install flaw, TrojPix air-gap exfiltration over video cables, and the SkillCloak AI-skill packer.
In this digest
Flipper Zero firmware development leans on its community
A quiet cycle: Flipper Zero firmware development continues with a reduced internal team and increased community reliance.
Read digestJadePuffer ransomware used AI agent to automate entire attack
The first documented ransomware campaign fully orchestrated by an LLM agent — reconnaissance, lateral movement and payload deployment without human operators.
Read digestBad Epoll Linux kernel flaw lets unprivileged users gain root
The Bad Epoll root escalation hitting Linux and Android, the NetNut takedown, the Avalon malware framework, and North Korean npm packages.
In this digest
Medtronic data breach impacts 3.8 million people
The 3.8M-person Medtronic breach, zero-click DuneSlide flaws in Cursor, PamStealer's macOS credential theft, and a Scattered Spider extradition.
In this digest
New CitrixBleed flaw exploited immediately after disclosure
CitrixBleed exploitation within hours of disclosure, the NetNut proxy takedown spanning 2M devices, The Gentlemen ransomware, and breach-concealment pressure.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check