← All Intelligence

Finance Industry Intelligence

62 briefings•16 vulnerability reports

Financial services are among the most targeted sectors in cybersecurity due to the direct monetary value of successful attacks. Banks, insurance companies, investment firms, and payment processors face sophisticated threats including banking trojans, BEC campaigns, and nation-state espionage targeting financial intelligence. defend.network monitors threats affecting the financial sector with a focus on regulatory implications and fraud prevention.

62
briefings
10
critical
32
high
27%
of all briefings

Threat Briefings

2026-11-04

Barracuda chained RCE, cPGuard backdoor supply chain, LLMjacking cloud fraud surge

Barracuda disclosed two critical chained vulnerabilities enabling root access; cPGuard's update infrastructure compromised to deploy backdoors; LLMjacking attacks costing enterprises up to $1M in fraudulent cloud charges.

high Vulnerability Exploit Supply Chain Credential Theft Technology Finance
2026-11-03

Google dismantles 1.3M Android botnet; critical Langflow RCE; Microsoft patches 1,400 flaws

Google disrupted a 1.3M-device Android TV botnet allegedly supplied by manufacturer Videostrong; IBM disclosed critical Langflow RCEs; Microsoft released 1,400+ patches.

high Mobile Malware Vulnerability Exploit Supply Chain Technology Finance
2026-11-02

FBI confirms $6.3B Binance heist; critical LXD/MicroCloud flaw; Polymarket $2.7M theft

FBI attributed record $6.3B Binance cryptocurrency heist to North Korean TraderTraitor group. Critical CVSS 10.0 flaw in LXD/MicroCloud enables authentication bypass. Polymarket lost $2.7M to supply-chain script injection; Northflank breach exposed AI API keys.

medium APT Data Breach Supply Chain Finance Government Technology
2026-11-01

Ivanti Connect Secure chained RCE under active exploitation; Chainalysis breached

CISA confirms active exploitation of chained Ivanti Connect Secure vulnerabilities enabling unauthenticated root access. Chainalysis breached via AI-powered attack; Northflank API keys compromised.

high Vulnerability Exploit Data Breach DDoS Technology Finance
2026-10-31

WordPress, GitLab RCEs exploited; TeamViewer flaw reverses control

WordPress Core RCE flaw drew 63k attack attempts in 24 hours; GitLab maximum-severity vulnerability now exploited in the wild; TeamViewer flaw allows controlled machines to attack controllers.

critical Vulnerability Exploit Malware Supply Chain Technology Retail Finance
2026-10-30

Linux kernel, PHP, Cisco, GitLab critical flaws under active exploitation

Linux kernel TCP flaw (CVSS 9.8) exploitable via AI-generated payloads; PHP RCE impacting 70% of websites under active attack; Cisco firewalls, GitLab servers targeted via CISA KEV additions with Nov 1 federal deadline.

high Vulnerability Exploit Cryptojacking Supply Chain Technology Government Finance
2026-10-23

Arista VeloCloud zero-day exploited; Railway, Capcom breaches; LiteLLM supply chain attack

Arista Networks' VeloCloud Orchestrator zero-day SQL injection actively exploited; Railway platform warns of secret exposure; Capcom confirms 11.7M account breach; LiteLLM release pipeline compromised with info-stealer malware.

critical Zero-Day Supply Chain Data Breach Technology Retail Finance
2026-10-15

Cisco Email Gateway RCE exploited; Nextcloud backdoors; 3 phishing platforms disrupted

Cisco Secure Email Gateway zero-day actively exploited for unauthenticated RCE; Nextcloud servers backdoored via Collabora vulnerability; Microsoft disrupts three phishing platforms behind 1B+ scam messages; U.S. charges 14 in North Korean IT worker fraud ring.

critical Zero-Day Phishing Credential Theft Technology Government Finance
2026-10-13

WordPress Bricksforge & SonicWall SMA CVSS 10.0 exploits; Ledger spy chips drain wallets

Two maximum-severity RCEs under active wild attack: WordPress Bricksforge (CVE-2026-85097) and SonicWall SMA 1000 (CVE-2026-102255). Ledger hardware wallets via CryptoBilis reseller contain spy chips; 360K+ iRhythm patients affected by data breach.

high Vulnerability Exploit Supply Chain Data Breach Technology Finance Healthcare
2026-10-12

P7 DarkSword iOS exploits escalate; ShinyHunters arrests surge; AI agents targeted in bank breaches

P7 DarkSword iOS variant adds keychain & crypto-wallet theft; multiple ShinyHunters members arrested across three countries; Chinese threat actor exploited Claude AI agents in South Korean bank attacks.

medium Mobile Malware Credential Theft Data Breach Finance Technology Government
2026-10-11

Critical unpatched flaws in AhsayCBS, BIND, Apache Struts actively exploited

AhsayCBS backup platform flaws (CVE-2026-105133, CVE-2026-105134) exploited for webshell deployment and crypto mining; CISA adds five actively-exploited legacy vulnerabilities to KEV catalog. Anthropic restricts Claude internet access after injection attack discovery.

high Vulnerability Exploit Credential Theft Cryptojacking Technology Finance
2026-10-01

Cisco SD-WAN, Zimbra, Zammad under attack; active exploitation confirmed

Cisco Catalyst SD-WAN Manager zero-day actively exploited for admin access, Zimbra webshell deployments confirmed

high Zero-Day Vulnerability Exploit Credential Theft Technology Government Finance
2026-09-29

Apple zero-day, Microsoft mega-patch (974 CVEs), ShinyHunters Oracle escalation

Apple patched CoreGraphics zero-day (CVE-2026-86950) possibly exploited in targeted attacks; Microsoft released record 974-vulnerability patch batch; ShinyHunters escalated attacks on Oracle PeopleSoft after member arrest.

high Zero-Day Vulnerability Exploit APT Technology Finance
2026-09-27

Oracle PeopleSoft, Microsoft patches, Elementor RCE under active exploitation

Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8) under mass exploitation via WAF bypass; ShinyHunters deploying web shells globally. Microsoft released 974 security patches. Lunex stealer abuses AMD drivers to disable EDR and harvest credentials.

high Vulnerability Exploit Malware Credential Theft Technology Finance Government
2026-09-26

GitHub Actions re-compromised; North Korea suspected in $351M Bitget heist

Compromised GitHub Actions resumed executing malware after re-gaining access, WSO2, Adobe remain under active exploitation.

high Supply Chain APT Credential Theft Technology Finance
2026-09-24

Check Point RCE, MikroTik SSH chain, malicious npm/Terraform packages in active exploitation

Check Point VPN gateway (CVE-2026-85102) actively exploited, MikroTik routers compromised via SSH chain, malicious Go malware in HashiCorp Terraform, npm

high Vulnerability Exploit Supply Chain Credential Theft Government Finance Technology
2026-09-11

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Mantax Otax and Gigabud banking trojans spread across Android, Russian-speaking actors deployed hundreds of AI agents to exploit PaperCut flaws on 395 organizations

critical Mobile Malware Vulnerability Exploit Credential Theft Technology Finance
2026-09-09

Microsoft patches record 974 CVEs; AI agents steal thousands of credentials; F5 devices breached

Microsoft released 974 security patches including two actively exploited zero-days. AI-driven credential harvesting compromised thousands of accounts in six hours. F5 BIG-IP devices are being breached to deploy Linux rootkits.

high Vulnerability Exploit Zero-Day Credential Theft Technology Finance Retail
2026-09-08

Chrome/Edge backdoors, Magento zero-day, Microsoft 365 phishing at scale

PEEP toolkit turns Chrome and Edge into post-compromise backdoors; Magento StyleSmuggler zero-day actively exploited to deploy Linux backdoors; BigBear phishing framework bypassed MFA at 258 organizations and stole 5,000+ Microsoft 365 credentials.

medium Zero-Day Malware Phishing Technology Finance Retail
2026-09-04

Critical RCEs in Cisco Nexus, HPE ArubaOS; infrastructure compromises escalate

Cisco patches critical Nexus 9000 unauthenticated RCE affecting 10 Silicon One switches; HPE releases 8 CVEs in ArubaOS-CX. Coder's Cloudflare infrastructure hijacked to distribute malicious Terraform modules. 153M+ driver licenses offered on dark web.

critical Vulnerability Exploit Supply Chain Credential Theft Technology Finance Healthcare
2026-09-02

JFrog Artifactory, Langflow critical flaws exploited; TeamPCP arrested

JFrog Artifactory CVE-2026-82329 (CVSS 9.8) exploited to mint admin tokens; Langflow CVE-2026-0768 RCE active for API key theft. Two alleged TeamPCP supply-chain attackers arrested in Australia. iOS spyware campaign harvesting wallet seeds.

critical Vulnerability Exploit Credential Theft Supply Chain Technology Healthcare Finance
2026-09-01

Kaspersky, Microsoft, Anthropic hit by infostealers; ransomware escalates AI tools

Infostealer malware targets Anthropic and Microsoft users; Aurora ransomware gang deploys Cursor AI; North Korean threat actors expand beyond IT into healthcare and sales.

medium Credential Theft Ransomware Malware Technology Healthcare Finance
2026-08-30

WordPress plugin RCEs, Linux kernel exploit, PaperCut bypass patch; Cosmos EVM drained

Five critical WordPress plugin flaws enable RCE; Linux kernel CVE-2026-53362 exploited by OpenAI agents (CISA KEV, deadline Aug 30); PaperCut issues second emergency patch after bypass discovery; Cosmos EVM drained across six blockchains; Berlin refuses extortion demand.

high Vulnerability Exploit Data Breach Supply Chain Technology Finance Government
2026-08-29

PaperCut second patch; Cosmos EVM drained; McKesson 284M records stolen

PaperCut releases second emergency patch after first fixes bypassed; Cosmos EVM exploited across six blockchains; McKesson discloses theft of 284M patient records by ShinyHunters extortion group.

high Vulnerability Exploit Data Breach Supply Chain Healthcare Government Finance
2026-08-26

Mirage2FA hits 4,500 orgs; Oracle Weblogic RCE, NVIDIA AI poisoning, WordPress plugin flaws

Mirage2FA phishing toolkit has compromised 4,500 US/EU organizations via Microsoft 365 spoofing; Oracle Weblogic Server vulnerability (CVE-2026-21962) added to CISA KEV with 3-day patch deadline; NVIDIA NemoClaw vulnerable to unauthenticated model poisoning.

high Phishing Vulnerability Exploit Credential Theft Technology Finance Government
2026-08-25

Keycloak authentication bypass, Microsoft active exploit, WordlistLoader/SynkLoader malware

Red Hat patches critical Keycloak account-takeover flaw; Microsoft releases 398 patches including one under active exploitation; WordlistLoader and SynkLoader malware families accelerate ransomware-adjacent payload delivery via ClickFix.

high Vulnerability Exploit Malware Credential Theft Technology Finance
2026-08-24

Microsoft patches 398 flaws; Zimbra exploitation deadline looms; Android cars compromised

Microsoft released 398 security patches including one actively exploited flaw; Zimbra command injection (CVE-2026-73570) in CISA KEV with Aug 24 federal deadline; Android vehicle head units infected via supply-chain attack distributing proxy botnet malware.

high Vulnerability Exploit Supply Chain Mobile Malware Technology Transportation Finance
2026-08-23

Android vehicles, AWS keys, Snowflake extortionist: Active threats escalate

Android car head units infected via malware-laden firmware updates; 9,300+ AWS keys remain active; Snowflake extortionist pleads guilty after compromising 165+ organizations.

high Mobile Malware Credential Theft Supply Chain Transportation Technology Finance
2026-08-18

GitLab, Forminator WordPress, Azure breach: Critical RCEs and 3.6M records stolen

GitLab patched critical GraphQL flaw; Forminator WordPress plugin RCE affects 600K+ sites; threat actor claims 3.6M Azure account records stolen from Fortune 500 companies.

medium Vulnerability Exploit Data Breach Credential Theft Technology Finance Government
2026-08-08

npm malware cluster, Metabase zero-day exploited, UNC6671 rebrands

Nearly 800 malicious npm packages deliver cross-platform RAT/infostealer; Metabase SQL injection exploited at Framework and Tally; UNC6671 extortion group rebrands across Redact, Pink, Helix, Falcon operations after millions in vishing revenue.

high Supply Chain Credential Theft Vulnerability Exploit Technology Finance
2026-08-04

Google Password Manager passkey hijacking; APT29 hotel Wi-Fi espionage; N-able RMM auth bypass exploited

Malware on Windows machines can hijack Google-synced passkeys without verification. Russian APT29 is actively compromising hotel Wi-Fi globally to steal Microsoft 365 credentials. N-able N-central RMM faces active CVE-2026-18577 exploitation with a second bypass vector discovered post-patch.

high Credential Theft APT Vulnerability Exploit Technology Finance
2026-08-03

Coldcard firmware flaw linked to $70M Bitcoin theft; Adform supply-chain attack

Coldcard hardware wallet firmware flaw allowed theft of 1,082.65 BTC (~$70.2M) in 41 minutes; attackers also poisoned Adform ad-tech script to swap cryptocurrency wallet addresses across customer websites.

medium Vulnerability Exploit Supply Chain Finance Technology
2026-08-02

Adobe Campaign CVSS 10.0 exploit, Coldcard $70M theft, Adform supply-chain attack

Adobe Campaign Classic patched critical CVSS 10.0 RCE flaw. Coldcard hardware wallet firmware flaw linked to $70.2M Bitcoin theft. Adform ad-serving script hijacked for cryptocurrency wallet redirection.

medium Supply Chain Vulnerability Exploit Technology Finance
2026-07-25

Microsoft 570 patches, Check Point KEV; BlueNoroff crypto phishing escalates

Microsoft patched record 570 vulnerabilities; Check Point SmartConsole and SharePoint RCE added to CISA KEV with July 25 federal deadline; BlueNoroff phishing kit profiles crypto wallets before malware delivery.

high Vulnerability Exploit Phishing Technology Finance
2026-07-21

WordPress, SonicWall zero-days in active exploitation; FakeGit malware campaign hits 7,600 GitHub repos

FakeGit campaign weaponizes 7,600 GitHub repositories to distribute SmartLoader malware. WordPress sites actively exploited via CVE-2026-60137/63030 chain within 72 hours of disclosure. SonicWall SMA1000 zero-days (CVE-2026-15409/15410) used in targeted attacks; Estée Lauder breach linked to Oracle E-Business flaw.

critical Malware Zero-Day Vulnerability Exploit Technology Finance
2026-07-15

Critical zero-days in Microsoft Active Directory, SonicWall SMA1000, GitHub malware campaign

Microsoft patches record 622 flaws including two zero-days in Active Directory and SharePoint under active attack. SonicWall confirms exploitation of SMA1000 zero-days. GitHub supply-chain attack spreads 300 fake repositories with infostealer malware.

critical Zero-Day Vulnerability Exploit Ransomware Technology Finance
2026-07-12

npm supply-chain attacks: jscrambler infostealer, Injective wallet theft, Zimbra RCE

jscrambler npm 8.14.0 compromised with Rust infostealer, Zimbra XSS flaw enables code execution

medium Supply Chain Malware Technology Finance
2026-07-11

Progress ShareFile emergency shutdown; Injective GitHub breach; U-Boot firmware flaws

Progress Software orders immediate shutdown of ShareFile Storage Zone Controllers; Injective Labs GitHub compromise distributes crypto-stealing malware; six new U-Boot bootloader vulnerabilities discovered in IoT and data-center devices.

medium Supply Chain Vulnerability Exploit Technology Finance
2026-07-08

GitHub, Gitea, Google Dialogflow hit by active exploits; RedWing Android malware-as-service

GitHub Agentic Workflows leak private repo data via public issues; Gitea CVE-2026-20896 authentication bypass actively exploited; RedWing Android malware rented as fraud service on Telegram.

high Vulnerability Exploit Mobile Malware Technology Finance
2026-06-30

Oracle PeopleSoft breaches widen; malicious Chrome extension steals searches; Mustang Panda targets India

Oracle PeopleSoft zero-day exploited at Nissan and NAIC; malicious Chrome extension intercepted searches and address bar input; Mustang Panda uses Zoho WorkDrive in Indian government campaigns.

critical Data Breach Credential Theft Vulnerability Exploit Finance Government
2026-06-23

WordPress, AI Platform, Proxy Supply-Chain Compromises: Backdoors and Cross-Tenant Leaks

ShapedPlugin WordPress Pro plugins backdoored via build-pipeline compromise, Dify AI platform has four cross-tenant data-exposure flaws, immediate deployment required.

medium Supply Chain Data Breach Technology Finance
2026-06-19

NGINX RCE, Windows crypto-stealer, Salesforce breaches, INC ransomware surge

F5 patched critical NGINX RCE (CVE-2026-42530). Microsoft disclosed active Windows clipboard-stealing malware spreading via USB worms since Feb 2026. INC ransomware claims 830+ victims; Salesforce data stolen through Klue OAuth breach by Icarus group.

medium Vulnerability Exploit Ransomware Technology Finance
2026-06-17

Fortinet actively exploited; Rokarolla targets 217 banking apps; Google Vertex AI flaw

Fortinet FortiSandbox faces active in-the-wild exploitation of three CVEs. Android banking trojan Rokarolla targets 217 financial apps with 137 remote commands. Google Vertex AI SDK bucket-squatting flaw enables unauthorized model hijacking.

high Vulnerability Exploit Mobile Malware Finance Technology
2026-06-15

Critical: Splunk RCE, Arch Linux supply-chain hijack, phishing-as-a-service dismantled

FBI dismantles Outsider Enterprise phishing network; Arch Linux AUR compromised with 400+ malicious packages deploying credential stealer and rootkit; Splunk Enterprise CVSS-9.8 RCE patched.

medium Supply Chain Vulnerability Exploit Technology Finance
2026-06-09

Critical Check Point VPN and Linux kernel flaws under active exploitation; NSO spyware defies court order

Check Point VPN zero-day (CVSS 9.3) actively exploited since early May; Linux kernel use-after-free now has public exploit; NSO Group continues WhatsApp phishing despite federal court injunction.

high Zero-Day Vulnerability Exploit Ransomware Technology Finance
2026-05-30

ChatGPT malware abuse, Marimo CVE-2026-39987 LLM exploitation, Russian infrastructure arrests

ChatGPT share links abused for malware delivery; Marimo CVE-2026-39987 exploited with LLM agents for post-compromise activity; Dutch authorities seize 800 Russian-linked servers and arrest hosting executives.

high Phishing Zero-Day Vulnerability Exploit Technology Finance
2026-05-26

Ghost CMS, Microsoft 365 phishing, and supply-chain malware in active exploitation

Ghost CMS SQL injection actively exploited across 700+ sites; Microsoft 365 phishing service Kali365 bypasses MFA; multi-ecosystem supply-chain attacks deliver credential stealers.

medium Vulnerability Exploit Supply Chain Technology Finance
2026-05-21

GitHub breach, SonicWall VPN MFA bypass, Drupal critical flaw demand patching

GitHub suffered breach of 3,800+ internal repos via TeamPCP. Microsoft disrupted malware-signing operation. SonicWall VPN and Drupal require urgent patching.

medium Data Breach APT Technology Finance
2026-05-10

Canvas extortion attack; JDownloader, Hugging Face & Trellix hit

Canvas learning platform compromised in extortion attack affecting hundreds of schools; supply-chain attacks hit JDownloader, Hugging Face, and Trellix; banking trojan TCLBANKER targets 59 financial platforms; critical ICS/OT breaches at water treatment plants.

low Ransomware Supply Chain Education Finance
2026-05-09

TCLBANKER trojan; Canvas breach hits education; Ivanti zero-day

Critical threats including TCLBANKER banking trojan, Canvas platform breach disrupting nationwide education, and active Ivanti zero-day exploitation require immediate response across financial, education, and government sectors.

medium Malware Ransomware Finance Education
2026-05-08

Palo Alto & Ivanti EPMM RCE exploited; PCPJack worm hits cloud

Critical vulnerabilities in Palo Alto Networks and Ivanti EPMM under active exploitation. PCPJack credential stealer worm targeting cloud infrastructure. Russian state actors harvesting Office tokens via router compromise.

high Zero-Day Vulnerability Exploit Technology Finance
2026-05-05

cPanel & MOVEit exploited; RMM phishing hits 80+ organizations

Critical vulnerabilities in cPanel and MOVEit, widespread RMM-based phishing compromising 80+ organizations, and supply-chain malware in PyTorch Lightning demand immediate patching and credential rotation.

high Phishing Vulnerability Exploit Ransomware Technology Finance
2026-04-30

SAP npm compromise; cPanel auth bypass; DPRK AI-assisted malware

Critical supply-chain attacks on SAP npm packages and North Korean AI-assisted malware, combined with cPanel authentication bypass and state-sponsored credential harvesting, create immediate existential threats to enterprise infrastructure and critical systems.

medium Supply Chain Credential Theft Technology Finance
2026-04-29

GitHub, Hugging Face RCE; VECT 2.0 ransomware; BlueNoroff deepfakes

Critical RCE vulnerabilities in GitHub and Hugging Face, destructive VECT 2.0 ransomware, Russian token harvesting, and BlueNoroff deepfake attacks demand immediate defensive action.

high Zero-Day Vulnerability Exploit Technology Finance
2026-04-18

Microsoft Defender & ActiveMQ zero-days under exploitation

Critical zero-day exploits in Microsoft Defender and Apache ActiveMQ, Russian state-sponsored token harvesting, and sophisticated ransomware evasion techniques pose immediate threats requiring emergency patching and threat hunting.

high Zero-Day Vulnerability Exploit Technology Finance
2026-04-10

Adobe Reader zero-day exploited; APT28 router credential theft

Critical zero-day in Adobe Reader, state-sponsored credential theft via routers, and major supply-chain compromises demand immediate action across all organizations.

medium Zero-Day APT Technology Finance
2026-04-06

FortiClient RCE exploited; DPRK & Chinese APTs hit EU institutions

State-sponsored DPRK and China-linked APT campaigns, critical FortiClient RCE exploit, and cascading supply chain attacks affecting European institutions and npm ecosystem.

critical APT Zero-Day Vulnerability Exploit Finance Technology
2026-04-03

Next.js exploited; Cisco IMC, ShareFile flaws patched; $280M DPRK theft

Next.js React2Shell flaw actively exploited; critical Cisco IMC, Progress ShareFile flaws patched; $280M cryptocurrency theft attributed to North Korea; credential harvesting impacts 766 hosts

high Vulnerability Exploit Credential Theft Ransomware Technology Finance
2026-03-31

Citrix exploited; Axios npm RAT supply-chain; OpenAI data theft

Critical Citrix vulnerability actively exploited, Axios npm supply chain attack spreading RAT, OpenAI vulnerabilities enabling data theft, state-sponsored APT operations escalating against telecom and healthcare sectors

high Vulnerability Exploit Supply Chain Government Finance
2026-03-22

Oracle RCE exploited; Iran wiper hits healthcare; Trivy worm spreads

Critical Oracle RCE, Russian state-sponsored phishing, Trivy supply-chain worm, and Iran-backed healthcare wiper attacks demand immediate emergency response and patching across enterprise infrastructure.

medium Vulnerability Exploit Phishing Technology Finance
2026-03-21

Oracle Identity Manager, Langflow exploited; Trivy supply-chain worm

Critical vulnerabilities in Oracle Identity Manager and Langflow actively exploited; Trivy supply chain attack escalates with CanisterWorm across 47 npm packages; Russian intelligence phishing campaigns compromise thousands.

high Vulnerability Exploit Supply Chain Ransomware Technology Finance
2026-03-20

VMware ESXi ransomware exploit; BlackSuit healthcare breach

Critical VMware ESXi vulnerability actively exploited by ransomware operators. BlackSuit group claims major U.S. healthcare breach. CISA adds 3 new CVEs. Microsoft patches Windows kernel zero-day. New PhishRelay kit enables real-time MFA bypass.

medium Ransomware Zero-Day Healthcare Finance

Vulnerability Reports

November 2 – 8

Vulnerability Report – Week 1 of November 2026

Two maximum-severity vulnerabilities (CVSS 10.0) are under active exploitation: CVE-2026-58115 affecting Siemens SIMATIC IoT2050 Advanced devices and CVE-2026-81648 in the CryptoPayment Gateway WordPr

13 critical 15 high
October 12 – 18

Vulnerability Report – Week 2 of October 2026

This week's verified threats center on two critical vulnerabilities: CVE-2026-102764 affecting BeyondTrust Remote Support, which has been actively exploited by state-backed threat actors for zero-day

20 critical 17 high
September 21 – 27

Vulnerability Report – Week 3 of September 2026

Two CVEs with active exploitation corroborated across multiple sources demand immediate attention this week. CVE-2026-35273 (Oracle PeopleSoft) is being weaponized by ShinyHunters using WAF-bypass tec

30 critical 10 high
September 14 – 20

Vulnerability Report – Week 2 of September 2026

This week saw four verified CVEs with explicit IDs and actionable intelligence. and require immediate patching. Two additional critical flaws affecting SolarWinds ARM and Orkes Conductor show high CVS

30 critical 10 high
August 10 – 16

Vulnerability Report – Week 2 of August 2026

Three critical vulnerabilities require immediate attention this week. CVE-2026-55040 (Microsoft SharePoint) and CVE-2026-59310 (VMware vCenter) are confirmed under active exploitation following PoC re

20 critical 10 high
August 3 – 9

Vulnerability Report – Week 1 of August 2026

CVE-2026-8037 in Progress Kemp LoadMaster represents a critical command injection flaw with 792+ reported exploit attempts. Organizations should prioritize patching known exploited vulnerabilities and

21 critical 10 high
June 1 – 7

Vulnerability Report – Week 1 of June 2026

Three verified CVEs dominated this week's reporting: one actively exploited Linux kernel vulnerability (CVE-2022-0492) now in CISA's Known Exploited Vulnerabilities catalog, one proof-of-concept relea

8 critical 6 high
May 18 – 24

Vulnerability Report – Week 3 of May 2026

This week presents an exceptionally high-risk threat landscape with multiple critical vulnerabilities under active exploitation across infrastructure, enterprise, and open-source ecosystems. Immediate

0 critical 2 high
May 11 – 17

Vulnerability Report – Week 2 of May 2026

This week marks a significant surge in actively exploited vulnerabilities, with three critical flaws requiring immediate patching across IT infrastructure and OT systems. The Ollama out-of-bounds read

2 critical 2 high
May 4 – 10

Vulnerability Report – Week 1 of May 2026

This week presents an exceptionally high-risk threat landscape dominated by active exploitation campaigns and critical infrastructure vulnerabilities. Federal agencies face an immediate Sunday deadlin

0 critical 0 high
April 27 – May 3

Vulnerability Report – Week 4 of April 2026

This week presents elevated risk from actively exploited vulnerabilities across network infrastructure, IoT devices, and enterprise software. Immediate patching is required for Cisco Firepower/ASA dev

0 critical 0 high
April 20 – 26

Vulnerability Report – Week 3 of April 2026

This week presents elevated risk across OT/ICS sectors with multiple critical RCE vulnerabilities in industrial control systems and emerging threats to cloud infrastructure. Active exploitation of Mic

0 critical 0 high
April 13 – 19

Vulnerability Report – Week 2 of April 2026

This week presents an elevated threat landscape dominated by actively exploited critical vulnerabilities in both IT and OT environments. Iranian-affiliated threat actors are actively targeting US crit

0 critical 0 high
April 6 – 12

Vulnerability Report – Week 1 of April 2026

This week presents elevated risk with five critical vulnerabilities actively exploited in the wild, including FortiClient EMS and video conferencing systems requiring immediate patching. Organizations

0 critical 0 high
March 30 – April 5

Vulnerability Report – Week 5 of March 2026

This week reflects sustained critical threats across OT/ICS and enterprise systems with multiple actively exploited vulnerabilities. F5 BIG-IP APM (CVE-2025-53521) and Citrix NetScaler (CVE-2026-3055)

0 critical 0 high
March 14–20

Vulnerability Report – Week 3 of March 2026

This week demands immediate attention. Two actively exploited vulnerabilities (VMware ESXi and FortiOS) require emergency patching. Organizations using Windows Server should prioritize the kernel priv

0 critical 0 high

Get the Daily Briefing in Your Inbox

Subscribe free and never miss a threat briefing.