North Korean IT worker

North Korean IT Worker Scam Infiltrates Tech Jobs GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks

GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks

North Korean IT Worker Scam Infiltrates Tech Jobs

Do Son September 17, 2026

Security researchers at Silent Push identified a fraudulent job recruitment scheme hosted on a Discord server. The...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026

CVE-2026-87796CVSS 9.8
The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions...
📅 Updated: Sep 17, 2026
CVE-2026-20332CVSS 9.9
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance...
📅 Updated: Sep 17, 2026
CVE-2026-20284CVSS 9.1
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct...
📅 Updated: Sep 17, 2026
CVE-2026-83059CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-83021CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-73456CVSS 10.0
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an...
📅 Updated: Sep 17, 2026
CVE-2026-83020CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-71133CVSS 10.0
No description available
📅 Updated: Sep 17, 2026

Critical Alert 3 Active Exploits Detected Today

North Korean IT Worker Scam Infiltrates Tech Jobs