identity theft

North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs The North Korean IT worker ecosystem

North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs

Do Son July 1, 2025

Microsoft Threat Intelligence reveals how North Korea’s remote IT worker program has evolved into a highly organized,...

Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing Smishing Triad SMS phishing

Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing

Do Son April 14, 2025

A new report from Silent Push has uncovered the extensive operations of Smishing Triad, a Chinese eCrime...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-48710CVSS 6.5
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-49869CVSS 10.0
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs")...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-59822
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-0768CVSS 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-35029
### Impact The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into...
Admin intel📅 Updated: Sep 1, 2026

Critical Alert 7 Active Exploits Detected Today

North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs

Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing