1. Executive summary Microsoft Threat Intelligence reports active exploitation targeting three distinct AI infrastructure workloads: LiteLLM, RAGFlow, and Kestra. Attackers compromised these systems to steal credentials,
1. Executive summary CVE-2022-0995 is a HIGH-severity out-of-bounds write vulnerability (CVSS 7.8) in the Linux Kernel. The flaw allows a
1. Executive summary CVE-2026-8452 is a HIGH severity (CVSS 8.8) memory buffer vulnerability — classified as CWE-119 (Improper Restriction of Operations within the
1. Executive summary CVE-2015-346 is a race condition vulnerability (CWE-264, CWE-367) in Red Hat libuser that allows authenticated local users to corrupt
1. Executive summary Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability (CVE-2021-23758) rated CVSS 8.1 HIGH, enabling remote code execution
1. Executive summary On 2026-08-26, the ransomware group "thegentlemen" publicly claimed a victim named "Party Rental" (country tag: GB), listing
1. Executive summary On 26 August 2026, the actor "AiLock" publicly listed Morgan Services (morganservices[.]com) as a ransomware victim on their leak site.
1. Executive summary A new adversary-in-the-middle (AitM) phishing-as-a-service (PhaaS) toolkit dubbed "NovaCookies" has been disclosed. The subscription-based
1. Executive summary CISA reportedly observed malicious activity targeting more than 100 internet-exposed US water and wastewater systems during July 2026, commonly involving programmable logic
1. Executive summary Trail of Bits reports that GPT 5.6-Cyber identified multiple routes from a QEMU/KVM guest to its Debian 12 host during
A note on the indicators below: all hostnames and URLs in this post are defanged (hxxps[:]//, [.]) so nothing in the page is clickable. Re-fang them
1. Executive summary CISA reports active exploitation of CVE-2026-60004, a Gitea code-injection vulnerability that converts attacker-controlled patch content into an executable Git