21 developments require attention, including 10 actively exploited issues.
Changes the order of stories, never hides any. Saved only in this browser.
Driven by 7 new CISA KEV additions and 9 government/CERT advisories.
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise.
Source reporting says attackers are already exploiting this, so exposed affected systems are at immediate risk.
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.
High-severity issues with a clear action, most urgent first.
Treat this as an emergency.
Treat this as an emergency.
Treat this as an emergency.
Apply the vendor's security update for Linux.
Apply the vendor's security update for vSphere / ESXi / vCenter and VMware ESX.
Choose who you are above to rank these for you.
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles.
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
Source reporting says attackers are already exploiting this, so exposed affected systems are at immediate risk.
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Confirmed exploitation in the wild, with the newest CISA Known Exploited Vulnerabilities first.
Ivanti Connect Secure
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
GitLab Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Linux Kernel
Linux Kernel Missing Initialization of a Variable Vulnerability
Broadcom VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
Adobe Commerce and Magento
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Google Brotli
Google Brotli Unchecked Return Value Vulnerability
No major incidents are developing right now. When one breaks, it's tracked here with its status and a live timeline.
What do you want to know?
Today, questions become precise searches of our intelligence database. We detect time, severity, exploitation, audience and product automatically. Written answers with citations are coming.
One short email: what needs attention, and what you can safely ignore.
Free. No spam. How we choose what matters.
