Security Intelligence
Technical details disclosed for a max-severity Paperclip vulnerability
Researchers disclosed technical details for three Paperclip vulnerabilities, highlighting the risks associated with AI...
Security Intelligence
Langflow vulnerability chain under active exploitation
Langflow OSS, an AI workflow platform that connects apps, data sources, and cloud services, is under active...
Security Intelligence
Active exploitation of N-able N-central authentication bypass flaw
N-able has disclosed and patched an authentication bypass vulnerability in its RMM platform that was actively exploited...
Security Intelligence
Critical TeamCity Vulnerability Exposes Software Development Pipelines
JetBrains patched CVE-2026-63077, a 9.8 CVSS flaw in TeamCity's agent polling protocol enabling unauthenticated remote...
Security Intelligence
Minnesota Water Sector Attacks Highlight OT Exposure Risks
A coordinated cyberattack disrupted OT systems at Minnesota water utilities, days after CISA warned of threat actors...
Security Intelligence
Broadcom Patches Critical Vulnerabilities Affecting Multiple VMware Products
Broadcom patched critical vCenter flaws, including an authentication bypass bug, that could expose VMware virtual...
Security Intelligence
Critical OpenWrt DHCPv6 flaw enables potential root-level device compromise
POC is now available for a critical OpenWrt flaw affecting the odhcpd DHCPv6 service and exposing vulnerable devices to...
Security Intelligence
POC Released for Critical vBulletin Vulnerability
A public PoC exploit targets CVE-2026-61511, a critical vBulletin flaw enabling unauthenticated remote code execution....
Security Intelligence
Public Exploit Enables Domain Controller Impersonation
A public exploit, dubbed Certighost, shows how a standard AD user can abuse AD CS to impersonate a Domain Controller...
Security Intelligence
Active exploitation of Check Point SmartConsole vulnerability
Check Point disclosed active exploitation of an authentication bypass vulnerability that allows an unauthenticated...
Security Intelligence
Active exploitation of Windmill vulnerability
Active exploitation of CVE-2026-29059 exposes files accessible to vulnerable Windmill deployments, creating a risk of...
Security Intelligence
WordPress wp2shell attacks escalate following public PoC release
An active campaign is exploiting chained WordPress Core flaws, dubbed wp2shell, to deploy webshells, steal credentials,...