https://skopnix.com/news/c52e6e4ac836-cisa-flags-three-linux-kernel-vulnerabilities-exploited-in-t skopnix en 2026-09-20T11:59:38.773Z CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting https://skopnix.com/news/65a6117d8930-the-rust-team-warns-of-a-social-engineering-campaign-targeti skopnix en 2026-09-20T08:20:00.000Z The Rust team warns of a social engineering campaign targeting core members and owners of popular packages https:// blog.rust-lang.org/2026/09/17/ targeted-attacks/ https://skopnix.com/news/34ab39d63df4-week-in-review-cisco-patches-exploited-email-gateway-0-day-r skopnix en 2026-09-20T08:00:21.000Z Week in review: Cisco patches exploited email gateway 0-day, Revolut breach https://skopnix.com/news/0b6de5b5a928-cognoscere-business-climate-report-2026-09-19-a-perfect-ten skopnix en 2026-09-19T18:10:10.881Z COGNOSCERE Business Climate Report — 2026-09-19 A perfect-ten severity Cisco vulnerability is already being exploited in the wild — and every network running Identity Services Engi https://skopnix.com/news/cc802f9f81a6-bragjack---20k-in-bounty-rewards-from-anthropic-perplexity-g skopnix en 2026-09-19T16:57:24.000Z BragJack - $20K in bounty rewards from Anthropic, Perplexity, Google, Microsoft and Opera Using 1 Extension https://skopnix.com/news/cfe7f416ead5-north-korean-waterplum-hackers-infected-30000-devices-worldw skopnix en 2026-09-19T14:05:15.000Z North Korean WaterPlum hackers infected 30,000 devices worldwide https://skopnix.com/news/cc2fd48c518b-claude-opus-5-helped-researchers-take-over-openai-staff-acco skopnix en 2026-09-19T13:28:35.000Z Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws https://skopnix.com/news/7f63da933d72-ransomware-emperador-cassias-mg-government skopnix en 2026-09-19T07:50:51.612Z Ransomware: emperador → Cassias MG Government https://skopnix.com/news/bf0f679dfdf4-crowdsec-says-tanstack-npm-attack-led-to-copy-of-170-private skopnix en 2026-09-19T07:14:54.000Z CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories https://skopnix.com/news/c43f571812de-ransomware-n0n-inter-venezuelas-largest-internet-provider skopnix en 2026-09-18T19:51:07.604Z Ransomware: N0n → Inter (Venezuela's largest internet provider) https://skopnix.com/news/4d3f93dab4e8-ghsa-jgh3-fggc-mcpm-obot-server-side-request-forgery-via-rem skopnix en 2026-09-18T17:59:46.000Z GHSA-jgh3-fggc-mcpm: Obot: Server-Side Request Forgery via remote MCP server URL https://skopnix.com/news/f96cff121e40-ghsa-xwmw-prc4-v3cr-obot-oauth-dynamic-client-registration-e skopnix en 2026-09-18T17:59:35.000Z GHSA-xwmw-prc4-v3cr: Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion https://skopnix.com/news/CVE-2026-850-ghsa-9jjc-fw8x-fmwx-iomoquettemoquette-broker-has-a-missing skopnix en 2026-09-18T17:58:39.000Z GHSA-9jjc-fw8x-fmwx: io.moquette:moquette-broker has a Missing Authorization issue https://skopnix.com/news/CVE-2026-591-ghsa-xcw4-53cc-hv32-mnemosyne-has-jwt-signature-verification skopnix en 2026-09-18T17:54:26.000Z GHSA-xcw4-53cc-hv32: Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass https://skopnix.com/news/CVE-2025-399-cisa-adds-cve-2025-39964-linux-kernel-to-the-known-exploited skopnix en 2026-09-18T17:51:17.459Z CISA adds CVE-2025-39964 (Linux Kernel) to the Known Exploited Vulnerabilities catalog https://skopnix.com/news/CVE-2026-634-ghsa-vr5f-w35q-98jp-persess-unvalidated-project-parameter-en skopnix en 2026-09-18T17:40:03.000Z GHSA-vr5f-w35q-98jp: Perses's unvalidated project parameter enables filesystem path traversal https://skopnix.com/news/CVE-2026-631-ghsa-4227-9989-jrhx-persess-missing-authorization-in-datasou skopnix en 2026-09-18T17:39:48.000Z GHSA-4227-9989-jrhx: Perses's missing authorization in datasource proxy allows cross-scope secret disclosure https://skopnix.com/news/CVE-2026-634-ghsa-cjgj-2fwf-4c2w-persess-project-query-parameter-authoriz skopnix en 2026-09-18T17:39:31.000Z GHSA-cjgj-2fwf-4c2w: Perses's project query parameter authorization bypass exposes cross-project resources