laptop farms

DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies FBI agents seize laptops from DPRK IT worker and DPRK IT worker laptop farms in Texas

Do Son October 14, 2026

TL;DR Federal authorities arrested two U.S. nationals and charged 14 individuals in a major crackdown on a...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

CVE-2026-104935CVSS 8.6
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands....
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-96951CVSS 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker...
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-3306CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-5477CVSS 7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
CISA KEV📅 Added to KEV: Oct 8, 2026

CVE-2026-104748CVSS 9.8
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress...
📅 Updated: Oct 14, 2026
CVE-2019-20367CVSS 9.1
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the...
📅 Updated: Oct 14, 2026
CVE-2019-19317CVSS 9.8
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated...
📅 Updated: Oct 14, 2026
CVE-2019-19646CVSS 9.8
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated...
📅 Updated: Oct 14, 2026
CVE-2019-9948CVSS 9.1
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to...
📅 Updated: Oct 14, 2026
CVE-2019-9636CVSS 9.8
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an...
📅 Updated: Oct 14, 2026
CVE-2019-8457CVSS 9.8
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when...
📅 Updated: Oct 14, 2026
CVE-2019-9169CVSS 9.8
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer...
📅 Updated: Oct 14, 2026