CVE Tools
Track your stack

Security news, decoded.

74 stories in the last 7 days, naming 204 CVEs; 60 of those CVEs are in CISA KEV.

RSS feed

The wire

Page 35 of 36 · newest first · times in UTC

Thursday, May 146 stories

  1. Cisco Talos
    Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilitiesReported exploitedCisco Catalyst SD-WAN Controller (vSmart)
  2. Rapid7 Blog
    CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)PatchCisco Catalyst SD-WAN Controller (vSmart)
  3. Rapid7 Blog
    When Network Controllers Become "God Mode" for AttackersReported exploitedCisco Catalyst SD-WAN Controller
  4. Bishop Fox
    Otto Support - Logging and Visibility in MCP ServersResearchModel Context Protocol (MCP)
  5. ESET WeLiveSecurity
    FrostyNeighbor: Fresh mischief and digital shenanigansReported exploitedPicassoLoader
  6. Risky Business News
    Srsly Risky Biz: The AI Regulation Knife Fight

Wednesday, May 133 stories

  1. Rapid7 Blog
    Pluribus and the Path to Domain Compromise: A ModeloRAT Case StudyReported exploitedModeloRAT
  2. Check Point Research
    Thus Spoke…The GentlemenIncidentRocket
  3. Google Project Zero
    A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window OpensPoC publicGoogle Pixel

Tuesday, May 123 stories

  1. Krebs on Security
    Patch Tuesday, May 2026 EditionRoundupWindows
  2. Cisco Talos
    Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilitiesPatchWindows
  3. Qualys Security Blog
    Microsoft and Adobe Patch Tuesday, May 2026 Security Update ReviewRoundupWindows

Monday, May 114 stories

  1. Ars Technica (Security)
    Linux bitten by second severe vulnerability in as many weeksReported exploitedLinux kernel
  2. Check Point Research
    11th May – Threat Intelligence ReportRoundupMOVEit Automation
  3. Check Point Research
    The State of Ransomware – Q1 2026RoundupQilin
  4. Palo Alto Unit 42
    Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and ToolsReported exploitedActive Directory Certificate Services (AD CS)

Thursday, May 71 story

  1. Bishop Fox
    Otto Support - SSRF and Token Passthrough with MCPResearchmcp-atlassian

Wednesday, May 63 stories

  1. Bishop Fox
    CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM ProxyReported exploitedLiteLLM Proxy
  2. Dark Reading
    From Stuxnet to ChatGPT: 20 News Events That Shaped CyberRoundup
  3. Palo Alto Unit 42
    Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code ExecutionReported exploitedPAN-OS

Tuesday, May 51 story

  1. Palo Alto Unit 42
    Copy Fail: What You Need to Know About the Most Severe Linux Threat in YearsPoC publicLinux kernel (AF_ALG/algif_aead)

Monday, May 41 story

  1. Check Point Research
    4th May – Threat Intelligence ReportRoundupShinyHunters

Thursday, Apr 301 story

  1. Krebs on Security
    Anti-DDoS Firm Heaped Attacks on Brazilian ISPsReported exploitedArcher AX21 routers

Wednesday, Apr 291 story

  1. watchTowr Labs
    The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)Reported exploitedcPanel & WHM

Tuesday, Apr 281 story

  1. GitHub Security Lab
    Securing the git push pipeline: Responding to a critical remote code execution vulnerabilityPatchgithub.com

Monday, Apr 271 story

  1. Check Point Research
    27th April – Threat Intelligence ReportRoundupContext.ai (OAuth token access)

Thursday, Apr 231 story

  1. Bishop Fox
    Otto Support – An MCP, Agentic-AI Security ChallengeResearchotto-support CTF

Monday, Apr 201 story

  1. Check Point Research
    20th April – Threat Intelligence ReportReported exploitedApache ActiveMQ

Thursday, Apr 161 story

  1. ESET WeLiveSecurity
    Supply chain dependencies: Have you checked your blind spot?AdvisoryESET

Tuesday, Apr 142 stories

  1. Krebs on Security
    Patch Tuesday, April 2026 EditionReported exploitedWindows
  2. GitHub Security Lab
    Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code GameResearchGitHub Secure Code Game

Monday, Apr 131 story

  1. Check Point Research
    13th April – Threat Intelligence ReportReported exploitedBitcoin Depot wallets/crypto-ATM systems

Tuesday, Apr 72 stories

  1. Bishop Fox
    API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616Reported exploitedFortiClient EMS
  2. NCSC UK
    APT28 exploit routers to enable DNS hijacking operationsReported exploitedTP-Link WR841N

Thursday, Apr 22 stories

  1. watchTowr Labs
    You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)ResearchProgress ShareFile Storage Zone Controller
  2. Mandiant
    vSphere and BRICKSTORM Malware: A Defender's GuideResearchVMware vCenter Server Appliance (VCSA)

Sunday, Mar 291 story

  1. watchTowr Labs
    Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)Reported exploitedNetScaler ADC

Saturday, Mar 281 story

  1. watchTowr Labs
    The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)ResearchNetScaler ADC

Thursday, Mar 261 story

  1. Bishop Fox
    strongSwan CVE-2026-25075: Integer Underflow in VPN AuthenticationPoC publicstrongSwan

Thursday, Mar 191 story

  1. watchTowr Labs
    A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)Patchtelnetd

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store