Critical Alert 2 Active Exploits Detected Today

CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability →
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability →
Powered by CVE Watchtower
×
July 23, 2026

Vulnerability

HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control

Do Son July 23, 2026 0
JetBrains vulnerabilities across IntelliJ IDEA, WebStorm and TeamCity, including CVE-2026-64812 remote development flaws enabling arbitrary code execution

JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development

Do Son July 23, 2026 0
Apache Syncope vulnerabilities including a privilege escalation flaw fixed in CVE-2026-57308 and CVE-2026-62183

Apache Syncope Patches SQL Injection and Privilege Escalation Flaws

Do Son July 23, 2026 0
Foxit PDF Reader vulnerability CVE-2026-57239 exploited for SYSTEM privileges via local privilege escalation

CVE-2026-57239: Public PoC Exploits Foxit PDF Reader Vulnerability for SYSTEM Privileges

Do Son July 23, 2026 0

Cyber Security

Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims hack

Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims

July 23, 2026 0
HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms HelloNet campaign malware delivered through the ViPNet update system on a Russian workstation

HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms

July 23, 2026 0
DoNot APT Targets Bangladesh Military With a Fake Officer Biography CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit

DoNot APT Targets Bangladesh Military With a Fake Officer Biography

July 23, 2026 0
GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign

July 23, 2026 0

Malware Alert

GST Phishing Campaign Distributes Remcos RAT Malware DPRK IT Workers, APT38 Crypto Forfeiture

GST Phishing Campaign Distributes Remcos RAT Malware

July 23, 2026 0
Spirals Ransomware Encrypts a South Asian IT Network in Under 24 Hours Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Spirals Ransomware Encrypts a South Asian IT Network in Under 24 Hours

July 22, 2026 0
TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files FSB Center 16 targeting vulnerable routers across critical infrastructure via weak SNMP

TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files

July 22, 2026 0
Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor digital-hacker

Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor

July 22, 2026 0

Data Leak

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent Hugging Face breach driven by an autonomous AI agent attack exposing internal datasets and credentials

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent

July 18, 2026 0
Grok Build Repository Upload Scandal: Researcher Confirms Privacy Mode Cannot Stop It Grok Build repository upload controversy, SpaceXAI privacy mode response

Grok Build Repository Upload Scandal: Researcher Confirms Privacy Mode Cannot Stop It

July 14, 2026 0
The Grok Build Privacy Controversy: Unauthorized Repository Uploads Grok Build privacy settings interface showing how to disable automated repository data uploads

The Grok Build Privacy Controversy: Unauthorized Repository Uploads

July 14, 2026 0
KDDI Data Breach: Millions of Emails and Passwords Stolen KDDI data breach illustration, KDDI email leak security concept

KDDI Data Breach: Millions of Emails and Passwords Stolen

July 9, 2026 0
Next Page ❯