FortiBleed 2026: Threat Intelligence Brief TLP: WHITEAudience: Security Leadership and OperationsPrepared by: Threat IntelligenceDate: 10 July 2026 Executive Summary FortiBleed is a large scale, financially motivated credential harvesting campaign disclosed in June 2026 after security researcher Volodymyr "Bob" Diachenko discovered an exposed command server left open by the
TRENDING TOPICS July 08, 2026 Ubiquiti Patches Max-Severity UniFi OS Vulnerability Ubiquiti disclosed seven critical vulnerabilities in UniFi OS today, and one of them is about as bad as it gets. What You Need to Know CVE-2026-50746 is a maximum-severity command injection flaw in the UniFi
TRENDING TOPICS July 01, 2026 Oracle E‑Business At Risk: CVE-2026-46817 Lets Attackers Take Over Oracle Payments And Exposed ERP Systems Oracle Payments has a critical, actively exploited vulnerability, and hundreds of internet-facing EBS instances are sitting exposed right now. Here's what's at
TRENDING TOPICS June 26, 2026 Attackers Are Abusing Shopify’s Shop App for Callback Phishing Threat actors have found a new way into people's phones: fake order receipts planted inside a trusted shopping app. Here's how the scam works and what to do if you spot
TRENDING TOPICS June 24, 2026 New macOS ClickFix Campaign Silently Mounts DMGs To Deliver AMOS Infostealer A new ClickFix variant is tricking Mac users into installing an infostealer through Terminal, and it's built to avoid every visual cue users normally rely on to spot trouble. Here's
TRENDING TOPICS June 17, 2026 Rokarolla Android Trojan Emerges as Major Threat to Banking and Crypto Apps A newly identified Android banking trojan known as Rokarolla is targeting 217 banking and cryptocurrency applications, combining financial theft with deep device control. The malware can steal lock screen PINs, intercept and send
TRENDING TOPICS June 12, 2026 Critical UniFi OS and UID Agent Flaws Expose Networks to High-Risk Compromise Ubiquiti has disclosed multiple critical vulnerabilities affecting UniFi OS devices and the UID Enterprise Agent, with CVE-2026-47367 leading the pack at a CVSS score of 9.9. The flaw stems
TRENDING TOPICS June 10, 2026 Critical 0-day in Veeam Backup & Replication: CVE-2026-44963 A critical zero-day vulnerability tracked as CVE-2026-44963 has been disclosed in Veeam Backup and Replication, targeting one of the most sensitive components in the enterprise environment: the backup server itself. The
TLP: WHITE | THREAT INTELLIGENCE BRIEF Prepared by: Threat Intelligence | 5 June 2026 Russia-Linked Threat Intelligence Series New Russia-Linked Threat Actor Uses AI to Supercharge Multi-Vector Attacks Against Ukraine What security teams, threat intelligence analysts, and executive leadership need to know about GREYVIBE and the AI-enabled threat
TRENDING TOPICS June 05, 2026 Cisco Patches Critical RCE Flaw CVE-2026-20230 in Unified Communications Manager Cisco has released urgent security updates addressing CVE-2026-20230, a critical remote code execution vulnerability in Unified Communications Manager (Unified CM) that could allow unauthenticated attackers to gain root-level control over
TRENDING TOPICS JUNE 03, 2026 One-click VS Code GitHub .dev Exploit Leaks Full GitHub Tokens A newly disclosed attack against GitHub.dev shows how a single malicious link can give an attacker read and write access to every repository a developer can reach. GitHub.dev is the browser-based
TRENDING TOPICS MAY 29, 2026 Critical OpenVPN Connect macOS Flaw Lets Local Attackers Gain Root Access A critical vulnerability in OpenVPN Connect for macOS, tracked as CVE-2026-9560, allowed local users to gain full root privileges by abusing the app’s privileged helper component. The issue affected versions 3.
BadHost
TRENDING TOPICS MAY 27, 2026 The Quiet Python Flaw BadHost is Putting AI Agents at Risk A newly disclosed vulnerability called "BadHost" is putting thousands of AI agents and inference servers at risk by allowing attackers to bypass authentication and reach internal services that were never meant to
Trend Micro
TRENDING TOPICS MAY 22, 2026 Trend Micro Apex One 0-day Exploited in the Wild Trend Micro is warning customers about active exploitation of critical 0-day remote code execution vulnerabilities in its Apex One endpoint security platform, and on‑premise administrators need to act immediately to reduce exposure. The
TRENDING TOPICS MAY 20, 2026 Update: GitHub’s Internal Source Code Breach, What TeamPCP’s Hack Really Means For Developers GitHub has confirmed that a threat actor known as TeamPCP gained unauthorized access to thousands of internal repositories after compromising an employee workstation through a malicious Visual Studio Code extension.
Microsoft
TRENDING TOPICS MAY 15, 2026 Microsoft Exchange 0-Day Under Active Attack Microsoft has confirmed that a new 0-day vulnerability in on-premises Exchange Server is already being exploited in active attacks, putting Outlook web users at immediate risk. The flaw, tracked as CVE-2026-42897, affects Exchange Server
Shai-Hulud
TRENDING TOPICS MAY 13, 2026 Mini Shai-Hulud Supply Chain Attack Backdoors TanStack npm Packages With Credential-Stealing Malware A critical supply chain attack has compromised 42 legitimate @tanstack/* packages on npm, allowing attackers to push credential-stealing malware through trusted software updates. The incident, tracked as CVE-2026-45321,
Trellix
TRENDING TOPICS MAY 08, 2026 RansomHouse Claims Trellix Source Code Breach, Raising New Supply Chain Concerns Trellix has confirmed that an unauthorized party gained access to a portion of its source code repository. The RansomHouse extortion group has publicly claimed responsibility for the intrusion. The company says it is investigating
PAN-OS
TRENDING TOPICS MAY 06, 2026 Critical PAN-OS Zero-Day CVE-2026-0300 Exposes Palo Alto Firewalls to Root-Level Takeover Palo Alto Networks is warning customers about CVE-2026-0300, a critical PAN-OS zero-day already being exploited in the wild that allows unauthenticated attackers to execute arbitrary
TLP: WHITE Audience: Human Resources Leadership Prepared by: Threat Intelligence 01 May 2026 Threat Intelligence Brief For Internal Distribution DPRK Insider Threat Series North Korea's Fake IT Worker Infiltration Campaign What HR needs to know about the most sophisticated hiring fraud operation in the world and how to
CVE-2026-31431
TRENDING TOPICS MAY 01, 2026 Copy Fail Vulnerability Turns Any Local Linux User into Root in Seconds A nine‑year‑old logic bug in the Linux kernel, now tracked as CVE‑2026‑31431 and nicknamed Copy Fail, has emerged as one of the most reliable paths to privilege escalation on
CVE-20265-32202
TRENDING TOPICS APR 29, 2026 CISA Flags New Windows Shell Zero‑Day Under Active Exploitation CISA has issued an urgent alert about a newly identified Windows Shell zero‑day that attackers are actively exploiting, adding the flaw to its KEV catalog and putting federal agencies on a short deadline to
TRENDING TOPICS APR 24, 2026 Entra ID “Agent IDs” Show How Quiet Admin Roles Become Prime Targets Recent research into Microsoft Entra ID has highlighted that attackers increasingly target service identities and mid-tier admin roles, not just classic Global Administrator accounts. By compromising identities that sit behind “trusted” first‑
ASP.NET
TRENDING TOPICS APR 22, 2026 ASP NET Core Critical Vulnerability: When Request Smuggling Becomes a Security Feature Bypass Microsoft has patched a maximum-severity vulnerability in ASP[.]NET Core, tracked as CVE-2025-55315, that allows HTTP request smuggling via the built-in Kestrel web server. With a CVSS score