Daily briefings on critical security disclosures, vulnerabilities, and threat intelligence.
A critical vulnerability in Kubernetes Image Builder allows remote unauthenticated attackers to gain root access to cluster nodes via persistent default credentials embedded in Proxmox virtual machine templates, tracked as CVE-2024-9486.
Read briefing →ESET researchers disclosed that cyberespionage group GoldenJackal breached air-gapped government and diplomatic networks using custom, modular USB malware toolchains designed to bridge physical network isolation, exfiltrate sensitive files, and execute arbitrary commands.
Read briefing →Mozilla shipped emergency updates for CVE-2024-9680, a critical use-after-free zero-day in Firefox Animation timelines actively exploited in drive-by attacks to achieve remote code execution in browser content processes.
Read briefing →Cisco patched a critical CVSS 9.8 authentication bypass zero-day in Catalyst SD-WAN Manager (CVE-2026-76504) actively exploited via URI encoding to achieve unauthenticated remote admin control.
Read briefing →Fortinet warned of active zero-day exploitation of CVE-2024-47575, a critical flaw in the FortiManager fgfmd daemon allowing unauthenticated remote attackers to execute arbitrary commands and exfiltrate configurations across managed FortiGate firewalls.
Read briefing →Chinese state-sponsored espionage group Salt Typhoon breached major U.S. telecommunications providers, compromising CALEA lawful intercept platforms to intercept communications and harvest call records of senior government officials.
Read briefing →Qualcomm disclosed active, targeted exploitation of CVE-2024-43047, a high-severity use-after-free flaw in its Digital Signal Processor FastRPC driver that enables local privilege escalation and memory corruption across 64 chipset architectures used in billions of mobile devices.
Read briefing →A sophisticated Mirai-derived malware campaign dubbed GorillaBot launched over 300,000 DDoS attack commands across 113 countries in three weeks, exploiting Apache Hadoop YARN RPC flaws and deploying multi-vector persistence mechanisms across enterprise and IoT systems.
Read briefing →Critical authorization vulnerabilities in Kia's dealer web portal allowed remote attackers to track, unlock, and start millions of connected vehicles using only a license plate, exposing owner personal data and enabling silent account takeover without physical access.
Read briefing →A critical command injection flaw in Zimbra Collaboration's postjournal service, tracked as CVE-2026-45519, is being actively exploited in the wild via crafted SMTP email headers to drop web shells and achieve unauthenticated remote code execution.
Read briefing →