Security Intelligence
Exploitarium repository publishes exploit research affecting widely used software
A public GitHub repository published PoC exploits for libssh2, Gitea, and other widely used software, raising risk for...
Security Intelligence
Critical MailPlus Server Flaws Expose Email Infrastructure
Synology patched three MailPlus Server vulnerabilities, including a maximum-severity flaw allowing unauthenticated file...
Security Intelligence
Targeting of OpenWrt-derived platforms exposes OT edge gaps
Active exploitation of a critical Lantronix flaw highlights growing adversary interest in OpenWrt-based edge devices...
Security Intelligence
Actively exploited PTC Windchill flaw allows unauthenticated RCE
A critical flaw in PTC Windchill and FlexPLM allows unauthenticated remote code execution, giving attackers persistent...
Security Intelligence
Update: FortiBleed exposes Fortinet credentials at global scale
New research shows that FortiBleed operates as a continuous credential harvesting and validation system, not just a...
Security Intelligence
Klue integration breach exposes Salesforce customer data
A breach at Klue in June 2026 exposed how a compromised SaaS integration can be used to access multiple Salesforce...
Security Intelligence
F5 patches critical NGINX flaws affecting edge infrastructure
F5 released updates on June 17, to fix two critical NGINX vulnerabilities that allow remote, unauthenticated...
Security Intelligence
FortiBleed exposes Fortinet credentials at global scale
Researchers validated the FortiBleed dataset, exposing potentially valid credentials for approx. 75,000 Fortinet...
Security Intelligence
Exploited Splunk vulnerability could allow RCE on exposed systems
Active exploitation of CVE‑2026‑20253 began within days of disclosure, targeting exposed Splunk Enterprise systems that...
Security Intelligence
SimpleHelp flaw could enable broader compromise across managed environments
A critical auth. bypass flaw in SimpleHelp allows unauthenticated adversaries to create privileged technician accounts...
Security Intelligence
China-nexus actor abuses domain-level compliance rules
A threat actor used domain-level content compliance rules to exfiltrate email comms, turning a built-in control into an...
Security Intelligence
Update: ShinyHunters used zero‑day to breach PeopleSoft environments
ShinyHunters’ exploitation of Oracle PeopleSoft is confirmed to involve a zero‑day in the Environment Management Hub...