New CitrixBleed flaw exploited immediately after disclosure
CitrixBleed exploitation within hours of disclosure, the NetNut proxy takedown spanning 2M devices, The Gentlemen ransomware, and breach-concealment pressure.
In this digest
Security Intel Feed
Cyber Hose
Page 89 of 93
Read digest
SharePoint RCE added to CISA KEV after active exploitation
An exploited SharePoint deserialization RCE, the first fully AI-driven ransomware attack, FortiBleed's ransomware links, and the Medtronic breach.
In this digest
Oracle E-Business Suite flaw under immediate threat
Active Oracle Payments exploitation, an unpatched Argo CD cluster-takeover flaw, CVSS 9.8 Cursor prompt-injection escapes, and the DHS HSIN breach.
In this digest
81 million password-spray attempts hammer Azure CLI accounts
A massive Azure CLI password spray, Google's 382-flaw Chrome patch batch, AI-hallucinated phishing domains, a zero-day dump, and Amazon's FTC fine.
In this digest
Langflow RCE exploited to deploy Monero miners on AI endpoints
Exploited Langflow AI endpoints, GuardFall hitting 10 of 11 AI coding agents, poisoned MCP tool descriptions, and Microsoft's AI-agent guidance.
In this digest
Nissan among 100+ organizations hit in Oracle PeopleSoft hack
The PeopleSoft campaign reaches Nissan, ransomware exploits Windows BlueHammer, BioShocking tricks AI browsers, and Kali 2026.2 lands.
In this digest
Hackers post Oracle PeopleSoft breach data from US insurance body
The NAIC PeopleSoft breach, a fake Perplexity extension logging searches, a Claude Code repo attack, the DirtyClone kernel LPE, and Server 2022 hotpatching.
In this digest
Critical libssh2 flaw lets malicious SSH servers hijack clients
A libssh2 client-side RCE with public PoC, hijacked npm and Go packages, The Gentlemen RaaS deep dive, GPT-5.6 Sol, and a $10M bounty on Russian hackers.
In this digest
Data breach exposes up to 14.2 million email logins at six ISPs
A KDDI-disclosed breach of a shared email system exposed up to 14.2M logins across six Japanese ISPs, feeding credential stuffing and phishing risk.
Read digestYARA-X 1.18 and 1.19 sharpen rule matching for threat hunters
A quiet cycle: back-to-back YARA-X releases bring performance and stability improvements to malware detection workflows.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check