Security Intelligence
Oracle WebLogic Server flaw enables server takeover via T3 and IIOP
A critical vulnerability affecting Oracle WebLogic Server, CVE-2026-60702, could allow a low-privileged threat actor to...
Security Intelligence
A ClickFix cluster: Observed activity from recent ClickFix campaigns
In July 2026, Field Effect observed a ClickFix campaign employing three distinct approaches to establish an initial...
Security Intelligence
Cisco patches critical vulnerabilities in Crosswork and Secure Workload
Cisco released updates on August 19, addressing nine vulnerabilities in Cisco Crosswork and Cisco Secure Workload,...
Security Intelligence
Critical GitLab vulnerability exploited days after disclosure
Exploitation attempts targeting a critical vulnerability affecting self-managed GitLab Community Edition and Enterprise...
Security Intelligence
Active exploitation of Zimbra Collaboration flaw
Active exploitation targets a Zimbra Collaboration SNMP flaw (CVE-2026-73570), allowing unauthenticated remote code...
Security Intelligence
Citrix NetScaler flaw exploited following POC release
Open-source reporting indicates a Citrix NetScaler flaw is being exploited in the wild following the release of public...
Security Intelligence
CISA flags actively exploited Ray vulnerability
Confirmed active exploitation of CVE-2025-62593, a critical Ray flaw that can allow remote code execution on systems...
Security Intelligence
Power Pages misconfigurations expose D365 data
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Active exploitation of SAP Commerce Cloud vulnerability
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Early exploitation attempts observed of GeoServer zero day
A new GeoServer zero day is already attracting internet-wide scanning and exploitation attempts, with hundreds of...
Security Intelligence
Public PoC available for ClamAV vulnerabilities
Seven vulnerabilities in the ClamAV malware scanning engine affect Cisco Secure Endpoint Connector deployments on...
Security Intelligence
Adobe patches critical ColdFusion and Campaign Classic vulnerabilities
Updates available for multiple critical vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic, several of...