VIVOTEK Camera Firmware
Severity: CriticalAction: Review
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
MikroTik RouterOS
Severity: CriticalAction: Review
Baicells Nova 430H
Severity: HighAction: Review
Kiteworks patches critical flaw, brings customer systems online
Severity: HighAction: Patch
Apple patches CoreGraphics zero-day flaw exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
One Packet Can Crash OT Servers in Industrial Sectors
Severity: HighAction: ReviewExploitation: Suspected
Japan's Keio confirms ransomware attack disrupted business systems
Severity: HighAction: Be aware
Times Car confirms data breach affecting 6.6 million user accounts
Severity: HighAction: Be aware
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Severity: CriticalAction: Review
US, UK warn of exploited Citrix NetScaler zero-day bugs
Severity: HighAction: ReviewExploitation: Suspected
JadePuffer agentic AI attacks target Azure, destroy cloud resources
Severity: HighAction: Be aware
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Severity: HighAction: Be aware
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Severity: HighAction: Be aware
WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Severity: CriticalAction: Review
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Severity: HighAction: Be aware
VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability
Severity: HighAction: Review
3 Cyber Threats That Defined the Summer of 2026
Severity: HighAction: Be aware
Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Eufy Omni C20, Omni X10 Pro
Severity: CriticalAction: Patch
Botslab G980H Dashcams
Severity: CriticalAction: Review
Malicious npm Packages That Evade Defenses
Severity: HighAction: Be aware
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Severity: HighAction: Review