notes
1. Executive summary
A publicly disclosed proof-of-concept (PoC) exploit named RoguePlanet targets a local elevation-of-privilege (EoP) vulnerability in the Microsoft Malware Protection
notes
1. Executive summary
A large-scale, currently active credential-compromise campaign — dubbed "FortiBleed" — is targeting internet-exposed Fortinet FortiGate firewalls and VPN gateways. Threat
notes
1. Executive summary
Oracle's June 2026 Critical Security Patch Update (CSPU) addresses 243 CVEs across 245 patches in 11 product families, with 122 critical-
notes
1. Executive summary
ESET has disclosed a portfolio of EDR-killer tools used by the ransomware-as-a-service (RaaS) operation "Gentlemen," internally branded
notes
1. Executive summary
Microsoft Threat Intelligence has documented a Windows-based cryptocurrency clipper ("CryptoBandits") active since February 2026 that propagates via malicious .lnk shortcuts
notes
1. Executive summary
A path traversal vulnerability (CVE-2026-55201, High severity, status: Unreviewed) has been disclosed in Evil-WinRM through version 3.9, fixed in
notes
1. Executive summary
A threat actor has compiled a verified database of working credentials for approximately 75,000 Fortinet / FortiGate firewall devices spanning 21,632 unique
notes
1. Executive summary
A data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,
notes
1. Executive summary
F5 has released out-of-band security updates addressing multiple vulnerabilities in NGINX, NGINX Plus, and NGINX Gateway Fabric. The two most severe
notes
1. Executive summary
A server-side request forgery (SSRF) vulnerability exists in Open WebUI's OAuth profile-picture handling that allows an attacker with a
notes
1. Executive summary
Cisco has amended its February 2026 advisory for CVE-2026-20127 (CVSS 10.0, improper authentication) to add Cisco Catalyst SD-WAN Validator
notes
1. Executive summary
DragonForce ransomware operators have been observed deploying a custom Go-based remote access trojan (RAT) dubbed Backdoor.Turn that tunnels command-and-control