Security Intelligence
Maximum-severity UniFi OS vulnerabilities enable full network takeover
Patches for three max-severity UniFi Operating System flaws allowing unauthenticated remote access to network...
Security Intelligence
Cisco Secure Workload API flaw creates cross-tenant exposure risk
A critical vulnerability (max CVSS score) in Cisco Secure Workload allows unauthenticated actors to gain Site Admin...
Security Intelligence
Leaked Shai-Hulud malware fuels wave of npm credential theft campaigns
Threat actors are escalating the Shai‑Hulud campaign by combining leaked malware code with compromised npm packages,...
Security Intelligence
Microsoft Exchange Server flaw actively exploited, no patch available
Microsoft has reported active exploitation of a high-severity vulnerability in on-premises versions of Microsoft...
Security Intelligence
Apache HTTP/2 flaw exposes unpatched servers to possible code execution
Apache HTTP Server vulnerability CVE‑2026‑23918 exposes unpatched systems to denial of service and, in some...
Security Intelligence
Microsoft Office update fixes Word RCE triggered via Outlook emails
Microsoft’s Patch Tuesday updates address a Microsoft Word RCE vulnerability that can be triggered through Outlook when...
Security Intelligence
Critical Exim flaw enables remote code execution on GnuTLS builds
Exim released a security update, 4.99.3, to fix a critical vulnerability that can allow unauthenticated remote...
Security Intelligence
Canvas login portal incident led to widespread disruption
How the Canvas incident disrupted academic operations globally and what institutions should watch for next, including...
Security Intelligence
Dirty Frag Linux kernel flaw disclosed, active exploitation observed
Dirty Frag, a Linux kernel flaw, is being used in post‑compromise scenarios where existing access is leveraged to...
Security Intelligence
OPNsense addresses code execution issue with POC available
OPNsense has released fixes for two vulnerabilities that affect firewall management security, both disclosed with...
Security Intelligence
Palo Alto firewall zero-day allows unauthenticated root access
Palo Alto Networks has disclosed an actively exploited zero-day allowing threat actors to take full control of affected...
Security Intelligence
Instructure data breach exposes education sector to extortion
Instructure has disclosed a breach affecting users at selected educational institutions after extortion group...