WhatsApp Malware

Astaroth WhatsApp Spambot Turns Brazil Victims Into Unwitting Malware Distributors

Astaroth WhatsApp spambot targeting Brazil via headless browser automation

Astaroth WhatsApp Spambot Turns Brazil Victims Into Unwitting Malware Distributors

Do Son August 7, 2026

At a glance Field Detail Actor Unidentified LATAM threat actor behind the Astaroth/Guildma botnet Activity WhatsApp Web...

WhatsApp Malware Campaign Spreads RMM Software

Diagram showing the WhatsApp malware campaign and VBScript infection chain

WhatsApp Malware Campaign Spreads RMM Software

Do Son June 26, 2026

At a glance Actor: Suspected Chinese-speaking threat actor (low confidence) Activity Type: Malware distribution and silent RMM...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-76418CVSS 8.6
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-116690CVSS 7.5
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-101767CVSS 9.8
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
Admin intel📅 Updated: Oct 28, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20097CVSS 8.7
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers...
Watchtower Verified📅 Updated: Oct 28, 2026

CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-61567CVSS 10.0
AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in `webSiteRootURL`,...
📅 Updated: Oct 28, 2026
CVE-2026-61564CVSS 10.0
AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.php` assembles `videos/configuration.php` by interpolating request...
📅 Updated: Oct 28, 2026
CVE-2026-91243CVSS 9.6
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions...
📅 Updated: Oct 28, 2026
CVE-2026-91250CVSS 9.9
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
📅 Updated: Oct 28, 2026
CVE-2026-91251CVSS 9.9
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
📅 Updated: Oct 28, 2026
CVE-2026-91241CVSS 9.1
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
📅 Updated: Oct 28, 2026
CVE-2026-118690CVSS 9.3
Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log...
📅 Updated: Oct 28, 2026