CERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware
Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar C...
Threat Intelligence Feed
Aggregating 9487 articles from trusted cybersecurity sources
LATEST CVEs
HIGH · CVE-2026-17196
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve
MED · CVE-2026-107450
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li
CVE-2026-107449
linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enha
CVE-2023-5649
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a
CVE-2023-5648
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL
CVE-2026-94584
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befor
CVE-2026-94580
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage
CVE-2026-94575
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS admin
CVE-2026-87687
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug
CVE-2026-87685
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions b
CVE-2026-87675
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions bef
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.
CVE-2026-87673
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi
CVE-2026-87667
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ver
CVE-2026-87666
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of
CVE-2026-107448
Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a
MED · CVE-2026-107446
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-boun
MED · CVE-2026-107445
A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces
MED · CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l
CVE-2026-94583
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric
CVE-2026-94582
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabri
CVE-2026-94578
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author
CVE-2026-92862
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t
CVE-2026-92861
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an
CVE-2026-87686
An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabri
CVE-2026-87684
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before
CVE-2026-87678
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versio
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions befor
CVE-2026-87672
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS v
CVE-2026-87671
An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0
CVE-2026-87670
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern
CVE-2026-87669
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releas
CVE-2026-87668
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions bef
CVE-2026-87665
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr
CVE-2026-87659
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions bef
MED · CVE-2017-20283
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr
CVE-2026-87726
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver
Latest News
Hoxhunt expands Respond to automate phishing investigations and email removal
Hoxhunt has announced expanded capabilities for Hoxhunt Respond, its email incident response automation platform for security operations teams. Respond can r...
Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers. The post Hadrian Raises $40 Million to...
Tanium adds endpoint behavior detection and AI-assisted threat hunting
Tanium has relaunched Tanium Security Operations to address AI-assisted attacks in which adversaries use legitimate administrative tools to blend into normal...
Attackers Hide AI Prompt Injections Inside Phishing Emails
Barracuda finds phishing emails designed to manipulate both human users and AI assistants
Anthropic widens access to AI cyber capabilities for vetted security teams
Anthropic is expanding its Cyber Verification Program to give more security teams access to advanced cyber capabilities with reduced safeguards on its most a...
Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands
Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI Model Generator ...
FBI, Secret Service add to warnings of FortiBleed credential stealing campaign
Users of two types of Fortinet hardware should take steps to limit their exposure to a now-global credential stealing campaign, U.S.
Russian-Speaking CyberXero Uses AI Agent Swarm to Attack Ukrainian Energy Infrastructure
CyberXero, a Russian-speaking initial access broker combining conventional exploitation tools with AI agents to pursue global website compromises and targete...
Hackers exploit critical Atlassian flaw after public PoC release
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in att...
FBI Warns FortiBleed Campaign Targeting Fortinet Firewalls and VPNs to Steal Credentials
The FBI and U.S.
Advantest Discloses Data Breach Months After Ransomware Attack
The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattack. The post Advantest Discloses Data ...
Data Breaches
No articles found.