Trezor

Trezor Data Breach at ShipMonk Grows to 80,000 Customers Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor Data Breach at ShipMonk Grows to 80,000 Customers

Do Son September 4, 2026

At a glance Organization Trezor (via shipping provider ShipMonk) Data exposed Names, emails, phone numbers, shipping addresses,...

macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets GlassWorm Wave 4, macOS Supply Chain Attack

GlassWorm Wave 4, macOS Supply Chain Attack

macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets

Do Son January 6, 2026

The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned...

FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed Attack chain summary

Attack chain summary

FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed

Do Son May 12, 2025

At PIVOTcon 2025, researchers from SentinelLABS and Validin unveiled a sprawling phishing campaign that has been quietly...

Webflow Weaponized: Phishing Attacks Target Crypto Wallets Webflow Phishing

Webflow Phishing

Webflow Weaponized: Phishing Attacks Target Crypto Wallets

Do Son October 23, 2024

New research from Netskope Threat Labs reveals a surge in phishing attacks targeting cryptocurrency wallets, employing a...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-51990
A critical remote code execution vulnerability in Sogou Input Method, one of the most widely used Chinese-language input...
Admin intel📅 Updated: Sep 12, 2026
CVE-2026-85706CVSS 10.0
GitLab has remediated an issue that, under certain conditions, an unauthenticated user could have read arbitrary files from...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-42016CVSS 8.1
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-42018CVSS 7.5
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-84869CVSS 9.9
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote...
CISA KEV📅 Added to KEV: Sep 11, 2026
CVE-2026-20079CVSS 10.0
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated,...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
CVE-2025-25249CVSS 8.1
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026