Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Severity: HighAction: Be aware
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
Severity: HighAction: Be aware
Unwrapping Retail Peak Season Cyber Threats
Severity: HighAction: Be aware
Sony ISP subsidiary data breach exposes 2.5 million customer records
Severity: HighAction: Be aware
Moldova investigates possible foreign involvement in major government cyberattack
Severity: HighAction: Be aware
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Severity: HighAction: ReviewExploitation: Suspected
Even after PHP2Shell, blast radius matters more than a CVSS score
Severity: HighAction: Patch
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
Severity: HighAction: Be awareExploitation: Exploited
Broadcom VMWare ESX Insufficient Logging Vulnerability (CVE-2026-41709) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Nefilim and Hive ransomware affiliate gets 70 months in prison
Severity: HighAction: Be aware
Hackers Start Probing Fresh Oracle EBS Vulnerability
Severity: CriticalAction: Patch
Japan's GMO urges customers to shut down PCs amid ransomware threat
Severity: HighAction: Be aware
UNM Health ransomware attack disrupts patient care, surgeries
Severity: HighAction: Be aware
Hackers hijack Convertr analytics script to steal payment card data
Severity: HighAction: Be aware
External Teams Chats Anchor 15-Minute Malware Delivery
Severity: HighAction: Be aware
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Severity: HighAction: Be aware
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Severity: HighAction: Be aware
Beta Channel Update for ChromeOS / ChromeOS Flex
Severity: CriticalAction: Patch
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
Severity: HighAction: Be aware
Warp discloses breach exposing AI agent logs, user telemetry data
Severity: HighAction: Be aware
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
Severity: HighAction: Be aware
University of New Mexico hospital diverts ambulances after cyberattack
Severity: HighAction: Be aware
Tailscale warns of SSH flaws allowing root privilege escalation
Severity: HighAction: Patch
HPE Patches Dozens of Critical Flaws in Networking Products
Severity: HighAction: Patch
Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48356) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
EPICS Base
Severity: HighAction: Review
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Severity: HighAction: UpdateExploitation: Suspected