Head Mare

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack

Do Son August 20, 2026

TL;DR CISA added two TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-72529 and...

Head Mare APT Exploits TrueConf Server Flaws to Deploy PhantomCore Backdoor Head Mare TrueConf attack PhantomCore backdoor diagram

Head Mare TrueConf attack PhantomCore backdoor diagram

Head Mare APT Exploits TrueConf Server Flaws to Deploy PhantomCore Backdoor

Do Son August 17, 2026

At a glance Actor/group Head Mare (tracked by Kaspersky; reclassified from hacktivist group to APT) Activity type...

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025 NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware

NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025

Do Son November 28, 2025

A new report from Kaspersky Labs reveals that despite being over two decades old, the NTLM authentication...

Head Mare and Twelve: Inside the Collaboration Targeting Russian Companies two hacktivist groups: Head Mare and Twelve

two hacktivist groups: Head Mare and Twelve

Head Mare and Twelve: Inside the Collaboration Targeting Russian Companies

Do Son March 14, 2025

In a series of attacks targeting Russian companies in September 2024, cybersecurity researchers uncovered evidence of collaboration...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-66384CVSS 5.3
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2023-49105CVSS 9.8
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file...
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2021-23758CVSS 8.1
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2019-1068CVSS 8.8
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions,...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-3246CVSS 5.1
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-5287CVSS 7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions...
CISA KEV📅 Added to KEV: Aug 26, 2026