On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential compromise campaign against internet-facing Fortinet ...
SOCRadar’s Threat Research Unit (STRU) has documented CyberXero, a Russian-speaking, financially motivated Initial Access Broker that pairs commodity offensive tooling with an AI orchestration layer ...
In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Committee that foreign adversaries would likely attempt to ...
Track threat actors and groups by country or industry for effective follow-up.
A French-speaking crew deleted the line reading “discernment retained” from its AI agent’s memory, wrote “I am a weapon” in its place, and pointed the result at two governments, a crypto exchange, a ...
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the ...
Microsoft’s September 2026 Patch Tuesday release addresses 974 vulnerabilities, including two actively exploited zero-days. Both zero-days are Windows elevation of privilege flaws, and both were added ...
N-able has released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to fix CVE-2026-86218, a critical pre-authentication remote code execution vulnerability in its remote monitoring and management ...
Administrators should verify the full platform-hotfix level, not only the major firmware branch. SonicWall says these vulnerabilities are unrelated to other reported vulnerabilities in other SonicWall ...
shinyhunters listed Neogen Corporation, a US-based technology company operating at neogen[.]com, on its leak site on 2026-08-30, alleging unauthorized access to the company’s systems and data. The ...
What Is CVE-2026-18431? CVE-2026-18431 is an arbitrary file-write vulnerability caused by a chain of authorization and input-validation weaknesses across Avada and Fusion Builder. An unauthenticated ...
Microsoft recently disclosed CVE-2026-69836, a critical Remote Code Execution (RCE) vulnerability in Microsoft Entra ID (formerly Azure Active Directory). Because this issue affected a ...