LATEST THREAT INTELLIGENCE

Next-Gen Cyber Security
Insights & Intelligence

Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.

Featured Article

🔥 Breaking

Nikkei suffers third breach in a month, 1.8M records exposed

Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.

⏱️ 2 min read📅 10/20/2026

Search Results

37 result(s) for “Vulnerability”

Vulnerability

ShinyHunters revives PeopleSoft exploits with a simple URL‑encoding bypass

A percent‑encoded “%50SEMHUB” path slips past WAFs, letting ShinyHunters hit Oracle PeopleSoft’s CVE‑2026‑35273 and plant web shells worldwide.

⏱️ 3 min read📅 9/27/2026
Vulnerability

AI‑Assisted Exploit Chains libheif RCE with OpenAI SSO

Hacktron leveraged Claude Opus 5 to combine a libheif RCE bug in Discourse with an OpenAI SSO flaw, briefly hijacking staff ChatGPT and Codex accounts and accessing an internal repo.

⏱️ 4 min read📅 9/20/2026
Vulnerability

AI‑crafted libheif exploit lets Hacktron hijack OpenAI employee accounts

Hacktron used Claude to auto‑write a remote‑code‑execution exploit for Discourse, then leveraged over‑permissive OpenAI sign‑in tokens to take over an employee’s ChatGPT account and push code to an internal repo.

⏱️ 4 min read📅 9/18/2026
Vulnerability

Acronis flags active exploitation of Linux privilege‑escalation bug

Acronis reports CVE‑2026‑87886 is being exploited in the wild and urges immediate patching of its cPanel/WHM and Plesk backup plugins.

⏱️ 3 min read📅 9/16/2026
Vulnerability

CISA flags critical GitLab path‑traversal bug as actively exploited

CISA added CVE‑2026‑85706 to its actively exploited list, issuing a binding three‑day directive for federal agencies to patch the GitLab flaw.

⏱️ 3 min read📅 9/14/2026
Vulnerability

CISA flags five exploited flaws in Artifactory, ScreenConnect, RouterOS

CISA added five actively exploited CVEs for JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its KEV catalog, with federal patch deadlines in mid‑September 2026.

⏱️ 3 min read📅 9/13/2026