Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Severity: HighAction: UpdateExploitation: Suspected
Hiding Capabilities in AI Models
Severity: HighAction: Be awareExploitation: PoC public
Apple backports CoreGraphics zero-day patches to older iPhones
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Energy giant ENGIE discloses data breach affecting customers
Severity: HighAction: Be aware
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Severity: HighAction: PatchExploitation: Exploited
Long Term Support Channel Update for ChromeOS
Severity: CriticalAction: Patch
VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
Severity: HighAction: Review
University of Copenhagen data breach exposes data of 525,000 people
Severity: HighAction: Be aware
Former pentester used ARTEX AI to steal 8.2 million data records
Severity: HighAction: Be aware
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
Severity: HighAction: Be aware
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
Severity: HighAction: Patch
Microsoft releases emergency .NET patches for critical Brotli flaw
Severity: HighAction: Patch
Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras
Severity: HighAction: Be awareExploitation: Exploited
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
Severity: HighAction: Be aware
AI coding agents hijacked using AGENTS.md file in Downloads folder
Severity: HighAction: Be aware
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Severity: HighAction: Be aware
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Severity: HighAction: Review
PHP shares mitigation for new RCE vulnerability with no patch
Severity: HighAction: Patch
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Severity: HighAction: Be aware
Quest Diagnostics warns of potential data theft after attack on lab service system
Severity: HighAction: Be aware
HPE patches eight max severity RCE and auth bypass AOS flaws
Severity: HighAction: Patch
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability (CVE-2026-110447) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVE-2026-114625) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Compromised TLS Certificates
Severity: HighAction: Be aware
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Severity: HighAction: Be aware
11 Million Impacted by Capcom Data Breach
Severity: HighAction: Be aware
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
Severity: HighAction: Be aware
LiteLLM Compromised in Fresh Supply Chain Attack
Severity: HighAction: Be aware
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
Severity: HighAction: Be aware