Trellix
TRENDING TOPICS MAY 08, 2026 RansomHouse Claims Trellix Source Code Breach, Raising New Supply Chain Concerns Trellix has confirmed that an unauthorized party gained access to a portion of its source code repository. The RansomHouse extortion group has publicly claimed responsibility for the intrusion. The company says it is investigating
PAN-OS
TRENDING TOPICS MAY 06, 2026 Critical PAN-OS Zero-Day CVE-2026-0300 Exposes Palo Alto Firewalls to Root-Level Takeover Palo Alto Networks is warning customers about CVE-2026-0300, a critical PAN-OS zero-day already being exploited in the wild that allows unauthenticated attackers to execute arbitrary code with root privileges on affected firewalls. The vulnerability
CVE-20265-32202
TRENDING TOPICS APR 29, 2026 CISA Flags New Windows Shell Zero‑Day Under Active Exploitation CISA has issued an urgent alert about a newly identified Windows Shell zero‑day that attackers are actively exploiting, adding the flaw to its KEV catalog and putting federal agencies on a short deadline to
CVE-2026-34197
TRENDING TOPICS APR 17, 2026 CISA Sounds the Alarm on Apache ActiveMQ: A 13‑Year‑Old RCE Bug Is Now Being Actively Exploited CISA has added CVE‑2026‑34197 to its KEV catalog after confirming that attackers are actively exploiting this high‑severity remote code execution flaw in Apache ActiveMQ
Docker
TRENDING TOPICS APR 08, 2026 Docker’s Silent AuthZ Failure: CVE‑2026‑34040 Turns One Oversized Request into Full Host Takeover A newly disclosed high‑severity flaw in Docker Engine, tracked as CVE‑2026‑34040 (CVSS 8.8), allows attackers to bypass authorization plugins and gain full control of the
CastleRAT
TRENDING TOPICS MAR 12, 2026 CastleRAT Campaign Abuses Deno Runtime and Steganography to Deliver Fileless Malware Researchers at ThreatDown identified a malware campaign that delivers CastleRAT, a remote access trojan designed for espionage, surveillance, and credential theft, by abusing the legitimate Deno JavaScript runtime. The attack begins with a social
UAT-9244
CVE-2026-21385 High Severity Vulnerability Description A memory corruption flaw in multiple Qualcomm chipsets caused by an integer overflow (CWE-190) during memory allocation, allowing attackers to execute code, escalate privileges, or crash devices. CISA confirmed active exploitation and requires Federal agencies to patch or mitigate it by March 24, 2026, under
Iran-US/Israel Conflict
TRENDING TOPICS MAR 04, 2026 Iranian APT Escalation Targets Global Critical Infrastructure Amid Expanding Regional Conflict Following the joint U.S.–Israeli strike known as Operation Lion’s Roar, Iran has escalated retaliatory cyber operations against global critical infrastructure. Iranian state-sponsored threat groups, including MuddyWater, OilRig, APT33, and UNC1549, have
Dohdoor Backdoor Campaign
CVE-2026-20127 Critical Severity Vulnerability Description A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering
npm Packages
TRENDING TOPICS FEB 25, 2026 Malicious npm Package ambar-src Shows Fast Moving Supply Chain Risk Tenable research reported that a malicious npm package named ambar-src reached roughly 50,000 downloads before removal, showing how quickly supply chain threats can spread across developer environments. The package appears to have been built
Lazarus Group
TRENDING TOPICS FEB 24, 2026 Update: Lazarus Expands Ransomware Playbook, Leveraging Medusa Against U.S. Healthcare North Korea’s Lazarus Group has expanded its financially motivated operations by leveraging the Medusa ransomware. Security researchers at Symantec assess that a Lazarus Group subgroup, commonly tracked as Andariel or Stonefly and linked
PromptSpy
CVE-2026-22769 Critical Severity Vulnerability Description Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying