COM hijacking

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking Argamal Trojan campaign Kaspersky malware analysis

Argamal Trojan campaign Kaspersky malware analysis

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking

Do Son June 9, 2026

A dangerous new electronic threat is currently targeting individuals who download adult video games online. Security researchers...

Steganography & Sabotage: Inside Pawn Storm’s PRISMEX Offensive Against NATO Logistics Zyxel security - Mitel MiCollab Vulnerability

Zyxel security - Mitel MiCollab Vulnerability

Steganography & Sabotage: Inside Pawn Storm’s PRISMEX Offensive Against NATO Logistics

Do Son April 1, 2026

The notorious Russia-aligned threat actor known as Pawn Storm (also recognized as APT28, Fancy Bear, and Forest...

Academic Ambush: How the Forum Troll APT Hijacks Scholars’ Systems via Fake Plagiarism Reports Forum Troll APT, Academic Espionage

Forum Troll APT, Academic Espionage

Academic Ambush: How the Forum Troll APT Hijacks Scholars’ Systems via Fake Plagiarism Reports

Do Son December 18, 2025

A relentless Advanced Persistent Threat (APT) group known as “Forum Troll” has shifted its crosshairs from corporate...

TransferLoader Malware Unmasked: IPFS-Enabled Loader Deploys Ransomware and Backdoors with Obfuscation Precision

TransferLoader, IPFS

TransferLoader Malware Unmasked: IPFS-Enabled Loader Deploys Ransomware and Backdoors with Obfuscation Precision

Do Son May 16, 2025

Zscaler ThreatLabz has uncovered a new and dangerous malware loader dubbed TransferLoader, actively used in the wild...

Novel Attack Uses Teams Phishing and Zero-Day TypeLib Hijacking Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

Novel Attack Uses Teams Phishing and Zero-Day TypeLib Hijacking

Do Son April 17, 2025

In a concerning escalation of social engineering and persistence techniques, cybersecurity firm ReliaQuest has uncovered a new...

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations SpyGrace malware

SpyGrace malware

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

Do Son December 12, 2024

In August 2024, JPCERT/CC confirmed a targeted attack against a Japanese organization, believed to be the work...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-63077CVSS 9.8
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CISA KEV📅 Added to KEV: Aug 5, 2026
CVE-2026-34486CVSS 7.5
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-9198CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
Admin intelCISA KEV📅 Added to KEV: Aug 3, 2026📅 Updated: Aug 3, 2026