Skip to content
skopnix
Every edition · newest first

The archive.

1,109 dispatchespage 12 / 19№ 449 – 390

  1. Fri 04 Sep 2026

    6 dispatches
    CVE-2026-84469: fastify versions before 5.12.2 decide whether to compile a request schema basedVULN
  2. CVE-2026-76169: fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under oneVULN
  3. Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE FlawsEXPL
  4. Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP MalwareKEV
  5. Pegasus, New NoviSpy Variant Found on Serbian Students and Opposition FiguresAPT
  6. Cisco searched for IOS XR bugs and found so many it rolled them into an update releaseVULN

  7. Thu 03 Sep 2026

    9 dispatches
    Ransomware: SilentRansomGroup → Katten Muchin RosenmanRANS
  8. Coder's registry infrastructure compromised to push malicious modulesSUPL
  9. Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution VulnerabilityVULN
  10. Over 3 Million WordPress Sites Affected by Migration Plugin VulnerabilityVULN
  11. Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That MeansMALW
  12. Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlankEXPL
  13. CVE-2026-84115 in Cleo Harmony: JWT Refresh Token Handler Flaw Exposes Remote Attack RiskVULN
  14. 2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber OperatorsAPT
  15. Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike FalconEXPL

  16. Wed 02 Sep 2026

    24 dispatches
    Ransomware: SilentRansomGroup → Greenberg TraurigRANS
  17. SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCEEXPL
  18. GHSA-96p9-rh4f-92cf: Windows ML CLI: CORS misconfig enables localhost RCEVULN
  19. CVE-2026-84292: fast-uri serializes the port component of a URI without validating it. …VULN
  20. [KEV] CVE-2026-59822: BerriAI LiteLLM Improper Authentication VulnerabilityKEV
  21. [KEV] CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling VulnerabilityKEV
  22. [KEV] CVE-2026-49869: Kestra OSS OS Command Injection VulnerabilityKEV
  23. Russian national facing 20 years for malware campaign that infected 80,000 freelancersMALW
  24. Cisco IOS XR Software Security Hardening Release: September 2026VULN
  25. Dogged Russia-based botnet dismantled after 23-year runMALW
  26. SonicWall's SMA1000 boxes under active attack againEXPL
  27. New pro-Ukraine hacker group targets Russian companies with custom ransomwareAPT
  28. Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)VULN
  29. BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root AccessSUPL
  30. Exploit Published for Fresh Cleo Harmony VulnerabilityEXPL
  31. Two critical Chrome flaws put users at risk on malicious websitesVULN
  32. Attackers are going after prominent individuals through OAuth phishing, FBI warnsAPT
  33. Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread MalwareAPT
  34. An AI-Assisted Cyber Attack: Inside a Unit 42 InvestigationBRCH
  35. Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected ThousandsMALW
  36. US charges Russian for infecting 80,000 freelancers with malwareMALW
  37. Global sinkhole operation ends Sality botnet’s 23-year runMALW
  38. Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware PayloadsMALW
  39. [KEV] CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection VulnerabilityKEV

  40. Tue 01 Sep 2026

    16 dispatches
    Another Artifactory CVE under attack by AI agents or humansEXPL
  41. Leaked Russian Cyber-Operations Training MaterialsAPT
  42. China-Linked Fire Ant Turned Cisco Routers, TACACS Servers Into Espionage PlatformsAPT
  43. Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding TestsAPT
  44. Iranian cyber spies target aviation, fintech developers with new malwareAPT
  45. Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586KEV
  46. Authentication bypass in EOL Proxmox VE 7 releaseEXPL
  47. 33-hour BGP hijack of Softaculous traffic prompts security scrambleSUPL
  48. Threat Actors Don’t Want Better Attacks. They Want Repeatable OnesEXPL
  49. North Korea-linked IT Workers Are Getting Hired Inside Western CompaniesAPT
  50. Attackers Pounce on Critical Artifactory Bug Following DisclosureKEV
  51. Berlin refuses to be blackmailed after network breachBRCH
  52. WatchGuard Patches Critical VulnerabilitiesVULN
  53. Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI AnalysisAPT
  54. [KEV] CVE-2026-82078: PaperCut NG/MF Unsafe Reflection VulnerabilityKEV
  55. AI Agents Compromised 440 PaperCut Servers, Researchers SayKEV

  56. Mon 31 Aug 2026

    1 dispatch
    Healthcare cyberattacks hit pacemakers and millions of patient recordsBRCH

  57. Tue 25 Aug 2026

    3 dispatches
    AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodesMALW
  58. U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesAPT
  59. [KEV] CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access ContKEV

  60. Fri 21 Aug 2026

    1 dispatch
    14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2SUPL