Critical Alert 4 Active Exploits Detected Today

CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability →
CVE-2026-55255 — Langflow Authorization Bypass Through User-Controlled Key Vulnerability →
CVE-2026-56290 — Joomlack Page Builder Improper Access Control Vulnerability →
CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability →
Powered by CVE Watchtower
×
July 8, 2026

Vulnerability

Linux kernel vulnerability CVE-2024-26582 TLS use-after-free root shell exploit diagram

Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell

Do Son July 7, 2026 0
NTLM reflection CVE-2026-24294 SMB local privilege escalation Windows Server 2025 PoC exploit

NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit

Do Son June 29, 2026 0
Diagram of the MediaTek t7xx WWAN flaw triggering an out-of-bounds read in the Linux kernel

Public Details Disclosed: MediaTek t7xx WWAN Flaw

Do Son June 24, 2026 0
FreeBSD privilege escalation CVE-2026-49413, Linuxulator vulnerability

FreeBSD Privilege Escalation Flaw CVE-2026-49413 Hits the Linuxulator

Do Son June 15, 2026 0

Cyber Security

Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns Phantom squatting attacker registering AI hallucinated domains predicted by LLM chatbots

Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns

July 8, 2026 0
ARToken Phishing Platform Steals Microsoft 365 Tokens and Bypasses MFA phsi

ARToken Phishing Platform Steals Microsoft 365 Tokens and Bypasses MFA

July 7, 2026 0
DeepSeek AI Generates Browser Native Ransomware Ransomware

DeepSeek AI Generates Browser Native Ransomware

July 7, 2026 0
The Illusion of Security: Kairos Ransomware and the Rise of Data Extortion Without Encryption Kairos ransomware data extortion case study showing cyber extortion risks without encryption

The Illusion of Security: Kairos Ransomware and the Rise of Data Extortion Without Encryption

July 6, 2026 0

Malware Alert

Native Messaging Backdoor Turns a Chrome Extension Into a Windows Threat Native Messaging backdoor malicious Chrome extension PowerShell Windows infection chain diagram

Native Messaging Backdoor Turns a Chrome Extension Into a Windows Threat

July 8, 2026 0
Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer China influence operations using banned ChatGPT accounts in OpenAI's June 2026 threat report targeting the US AI policy debate

Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer

July 8, 2026 0
RustDuck Botnet: A Two-Stage DDoS Threat Shifting From C to Rust RustDuck botnet two-stage DDoS malware loader core architecture analysis diagram

RustDuck Botnet: A Two-Stage DDoS Threat Shifting From C to Rust

July 7, 2026 0
ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks ValleyRAT malware email campaign delivering DLL sideloading payload to Japanese and Chinese users

ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks

July 6, 2026 0

Data Leak

iPhone 18 Pro Secrets Leaked in Tata Electronics Breach iPhone 18 Pro leak from the Tata Electronics data breach exposing Apple supplier lists, components, and drop-test photos RCS End-to-End Encryption

iPhone 18 Pro Secrets Leaked in Tata Electronics Breach

June 30, 2026 0
LastPass Customer Data Stolen in Klue Supply Chain Breach LastPass Klue breach OAuth token theft Salesforce supply chain attack

LastPass Customer Data Stolen in Klue Supply Chain Breach

June 23, 2026 0
Tata Electronics Data Breach Exposes Apple and Tesla Files Tata Electronics data breach leaking Apple and Tesla component design and specification files on a dark web site

Tata Electronics Data Breach Exposes Apple and Tesla Files

June 23, 2026 0
Novo Nordisk Breach Exposes AI Models and Patient Data Novo Nordisk data breach Novo Nordisk hack, AI training data theft, clinical trial data leak

Novo Nordisk Breach Exposes AI Models and Patient Data

June 16, 2026 0
Next Page ❯