WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Live feed
Latest intelligence
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
On Anthropic’s AI Misuse Report
Severity: ElevatedAction: Be aware
Stable Channel Update for ChromeOS / ChromeOS Flex
Severity: ElevatedAction: Be aware
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Severity: ElevatedAction: Be aware
SectopRAT Returns, Hiding Inside a Legitimate Application
Severity: ElevatedAction: Be aware
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Severity: ElevatedAction: Be aware
Trust and the enticing consultancy offer
Severity: ElevatedAction: Be aware
What’s new in Microsoft Security: September 2026
Severity: Informational
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Severity: HighAction: Be aware
VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability
Severity: HighAction: Review
3 Cyber Threats That Defined the Summer of 2026
Severity: HighAction: Be aware
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
Severity: ElevatedAction: Be aware
Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Siemens Mendix Runtime (Update A)
Severity: ElevatedAction: Mitigate
Eufy Omni C20, Omni X10 Pro
Severity: CriticalAction: Patch
Botslab G980H Dashcams
Severity: CriticalAction: Review
Malicious npm Packages That Evade Defenses
Severity: HighAction: Be aware
One URL, Three Different Tricks, (Thu, Sep 24th)
Severity: ElevatedAction: Be aware
SASE Converges Network & Security Into One Cloud Solution
Severity: Informational
EDR Evasion Stack Helps Process Injection Slip Past Defenses
Severity: Informational
Chrome for Android Update
Severity: ElevatedAction: Be aware
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Severity: ElevatedAction: Be aware
Early Stable Update for Desktop
Severity: ElevatedAction: Be aware
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Severity: HighAction: Review