Daily briefings on critical security disclosures, vulnerabilities, and threat intelligence.
Broadcom has issued security updates addressing a maximum-severity heap overflow vulnerability (CVE-2026-38812) in VMware vCenter Server's DCE/RPC protocol implementation, enabling unauthenticated remote adversaries to achieve arbitrary code execution on core enterprise virtualization infrastructure.
Read briefing →Ransomware operators deploying Akira and Fog are actively exploiting a critical deserialization vulnerability (CVE-2026-40711) in Veeam Backup & Replication to achieve remote code execution and disable enterprise disaster recovery systems.
Read briefing →Ivanti warned that threat actors are actively exploiting a critical path traversal zero-day (CVE-2026-8963) in Cloud Services Appliance 4.6, chaining it with command injection to achieve remote code execution and full administrative takeover.
Read briefing →Threat actors abused a hardcoded Cloudflare API key to deploy a rogue Cloudflare Worker across Brevo infrastructure, stripping CSP headers and injecting ClickFix infostealer scripts into customer forms and SDK widgets.
Read briefing →MikroTik released emergency updates for RouterOS addressing the 'MikroTrick' exploit chain (CVE-2026-67276 and CVE-2026-86060), where remote unauthenticated threat actors bypass SSH authentication and elevate privileges to hijack exposed network routers.
Read briefing →A joint multinational advisory from the FBI, Japan NPA, Germany BfV, and Australia ACSC revealed North Korean state actor WaterPlum compromised over 30,000 developer devices across 100 countries using weaponized coding tests and BeaverTail malware to harvest $10.7M in cryptocurrency.
Read briefing →Citrix warned of an actively exploited authentication bypass flaw (CVE-2026-19490, CVSS 9.3) in NetScaler ADC and Gateway appliances, where unauthenticated remote attackers abuse SAML endpoints to forge sessions and bypass enterprise perimeter access controls.
Read briefing →CISA has added a high-severity Linux kernel flaw (CVE-2026-53266) to its Known Exploited Vulnerabilities catalog following active in-the-wild exploitation, where an ebtables SNAT out-of-bounds write corrupts file-backed page-cache memory to grant unprivileged local attackers root access.
Read briefing →Cisco issued emergency updates for a maximum-severity authentication bypass zero-day flaw (CVE-2026-76460, CVSS 10.0) in Identity Services Engine that allows unauthenticated remote attackers to obtain root privileges via crafted API requests, which is actively exploited in attacks.
Read briefing →Google addressed a high-severity zero-day vulnerability (CVE-2026-58704) in the cellular modem of Pixel devices that allows unauthenticated proximal attackers to escalate privileges without user interaction, which is actively exploited in targeted attacks.
Read briefing →