kev-boosted
1673 articles with this tag
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock
Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
Russian hackers exploited Zimbra zero-day in espionage campaigns
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CheckPoint authentication bypass bug exploited, added to CISA list
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
27th July – Threat Intelligence Report
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
PTC Windchill Vulnerability Exploited in Ransomware Campaign
Bulletin d'actualité CERTFR-2026-ACT-032 (27 juillet 2026)
Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
Ransomware Groups Increasingly Deploy EDR Kill Techniques
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
The Signs Were There: What the First Autonomous Ransomware Case Confirms
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
Kubernetes Runtime Threats Explained
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
NCSC-2026-0264 [1.00] [M/H] Kwetsbaarheden verholpen in Check Point Security Management producten
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Multiple Vulnerabilities in Internet-Facing Systems Targeting Hong Kong’s Education Sector
Ransomware groups are hammering your vulnerable VPNs
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
DSA-6399-1 wordpress - security update
Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)
Check Point hole grants unauthenticated attackers full SmartConsole admin privileges
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Thailand's Ministry of Finance targeted with an AI agent running with approval prompts disabled
Don’t swing at everything
Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
Year-long Russian attacks infect users as soon as they look at an email
Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
Russian Global Webmail Espionage
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Multiples vulnérabilités dans les produits Check Point (23 juillet 2026)
What the recent SharePoint bugs told us about the patch race
Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)
Finding actors that probe a CVE's exploit path before public disclosure in 30M honeypot records.
New Check Point Zero-Day Vulnerability Exploited in the Wild
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
WP2Shell: Hands-On Lab Reproducing the Pre-Auth WordPress Core RCE
Critical Zimbra security update fixes 9 vulnerabilities
CISA Adds Two Known Exploited Vulnerabilities to Catalog
wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution
Multiples vulnérabilités dans Microsoft Sharepoint (22 juillet 2026)
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload
Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls
Estée Lauder customer data compromised in Oracle E-Business Suite breach
Siemens CADRA
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack
SonicWall SMA zero-days were exploited weeks before disclosure
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
JadePuffer Returns With Ransomware Designed to Wipe AI Models
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab
wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
20th July – Threat Intelligence Report
Bulletin d'actualité CERTFR-2026-ACT-031 (20 juillet 2026)
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
Suspected Chinese snoops caught breaking into universities' Roundcube mailservers
Inc Ransomware Exploits SonicWall SMA Zero-Days
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Joomla SP Page Builder RCE
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
Attackers target critical FortiSandbox flaws as CISA issues patch order
Critical Oracle EBS bug added to CISA list of exploited vulnerabilities
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
[Security Blog] Modern Software’s Hidden Cost: Managing Risk in the Open-Source Ecosystem
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
Fresh SharePoint Vulnerability Exploited Soon After Disclosure
Joomla SP Page Builder RCE
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
CISA urges immediate SharePoint hardening as exploits mount