All Tags

• Android March 2026 Security Update Patches 129

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Substack Discloses Data Breach After 100-Day Undetected

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Cline CLI Supply Chain Attack Installs Unauthorized

• Japanese Semiconductor Giant Advantest Hit by Ransomware

• Telus Digital Confirms Massive Breach After ShinyHunters

• AppsFlyer Web SDK Supply Chain Attack Spread

• CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits Surge

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• HellCat Ransomware Group Breaches Ascom, Exfiltrates 44GB

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• U.S. Treasury Sanctions Russian Zero-Day Broker Operation

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• NIST to Stop Rating Non-Priority Flaws Due to Volume Increase

• CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin Interface

• CVE-2018-25165: SQL Injection Vulnerability Disclosed in

• Samsung Ends Software Support for Galaxy S21 Series

• Container Security Scanning with Trivy: Images, IaC, and CI/CD

• Domain Controller Hardening: Securing Active Directory

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison Hundreds of Python Repos

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents

• PromptSpy: First Android Malware to Weaponize Generative AI

• Google Disrupts Massive Chinese Espionage Campaign

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• New FortiClient EMS Flaw Exploited in Attacks, Emergency Patch Released

• New Critical Exim Mailer Flaw Allows Remote Code Execution

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Critical Langflow RCE Flaw Exploited Within 20 Hours of Disclosure

• CISA: New Langflow Flaw Actively Exploited to Hijack AI Workflows

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• Cline CLI Supply Chain Attack Installs Unauthorized

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• Microsoft Halts Forced Global Rollout of Microsoft 365 Copilot App

• Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw

• CVE-2018-25165: SQL Injection Vulnerability Disclosed in

• CVE-2019-25662: ResourceSpace 8.6 Unauthenticated SQL Injection

• Cisco Patches Critical and High-Severity Vulnerabilities Across Product Lines

• Disgruntled Researcher Leaks BlueHammer Windows Zero-Day Exploit

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables Full System Takeover

• How to Configure Microsoft Sentinel Analytics Rules

• Automating Report Generation with Python and Jinja2

• Automated News Aggregation with Deduplication Algorithms

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• Ransomware Forces University of Mississippi Medical Center

• Former Cybersecurity Incident Responders Plead Guilty to

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Google Disrupts Massive Chinese Espionage Campaign

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• The Good, the Bad and the Ugly in Cybersecurity – Week 14

• Hypersonic Supply Chain Attacks: AI Defense Stops Zero-Days Without Payload Knowledge

• Researchers Uncover Pre-Stuxnet 'fast16' Malware Targeting Engineering Software

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• Trellix Source Code Breach Highlights Growing Supply Chain Threats

• How to Detect and Block ClickFix Attacks

• Microsoft Defender for Endpoint: Configuration and

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• Japanese Semiconductor Giant Advantest Hit by Ransomware

• Ransomware Forces University of Mississippi Medical Center

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits Surge

• Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

• CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File Upload in Admin Panel

• CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin Interface

• Substack Discloses Data Breach After 100-Day Undetected

• IRS Shares Tax Data of 1.28 Million Individuals with DHS

• Persona Source Code Leak Exposes Hidden Biometric

• Cisco Patches Critical and High-Severity Vulnerabilities Across Product Lines

• Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now Available

• SentinelOne Health Check: Agent Status Monitoring and

• Deploy SentinelOne Policy

• Invoke SentinelOne Threat Hunt

• SentinelOne Health Check: Agent Status Monitoring and

• Deploy SentinelOne Policy

• Invoke SentinelOne Threat Hunt

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• Google Disrupts Massive Chinese Espionage Campaign

• Android March 2026 Security Update Patches 129

• Diesel Vortex: Russian Cybercrime Ring Steals 1,649

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• UNC6426 Weaponizes Old nx npm Supply Chain Compromise to

• CanisterWorm: First Blockchain-Powered Self-Spreading Worm Hits 47 npm Packages

• Attack on Axios Developer Tool Threatens Widespread Compromises

• AppsFlyer Web SDK Supply Chain Attack Spread

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin Interface

• File Read Flaw in Smart Slider Plugin Impacts 500K WordPress Sites

• Hackers Exploit Critical Flaw in Ninja Forms WordPress Plugin

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• SentinelOne Health Check: Agent Status Monitoring and

• Deploy SentinelOne Policy

• Invoke SentinelOne Threat Hunt

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• Axios npm Hack Used Fake Teams Error Fix to Hijack Maintainer Account

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• International AI Safety Report 2026 Warns of AI-Driven

• SentinelOne Health Check: Agent Status Monitoring and

• Diesel Vortex: Russian Cybercrime Ring Steals 1,649

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Former Cybersecurity Incident Responders Plead Guilty to

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Android March 2026 Security Update Patches 129

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• FortiGate Firewall Policy Management with PowerShell

• SentinelOne Health Check: Agent Status Monitoring and

• Deploy SentinelOne Policy

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Firestarter Malware Survives Cisco Firewall Updates and Security Patches

• FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

• Mass Exploitation of Fortinet FortiGate Devices Underway

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC Zero-Day Tied to Ransomware

• North Korea's UNC4899 Breached Crypto Firm via AirDropped

• AppsFlyer Web SDK Supply Chain Attack Spread

• Hacker Walks Away with $24.5 Million After Breaching Resolv DeFi Platform

• Cline CLI Supply Chain Attack Installs Unauthorized

• Betterleaks: New Open-Source Secrets Scanner Built to Replace Gitleaks

• Claude Code Source Code Accidentally Leaked in NPM Package

• Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE

• Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

• New 'Pack2TheRoot' Flaw Gives Hackers Root Linux Access

• CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload Allows Unauthenticated RCE

• CVE-2019-25662: ResourceSpace 8.6 Unauthenticated SQL Injection

• CVE-2021-4473: Tianxin Behavior Management System Unauthenticated Command Injection

• CVE-2019-25662: ResourceSpace 8.6 Unauthenticated SQL Injection

• CVE-2025-62319: Critical SQL Injection in HCL Unica (CVSS 9.8)

• CVE-2026-3730: SQL Injection in itsourcecode Free Hotel

• CVE-2021-4473: Tianxin Behavior Management System Unauthenticated Command Injection

• CVE-2025-15379: MLflow Command Injection in Model Serving (CVSS 10.0)

• CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• North Korea's UNC4899 Breached Crypto Firm via AirDropped

• Axios NPM Package Breached in North Korean Supply Chain Attack

• Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active Reconnaissance

• CISA: New Langflow Flaw Actively Exploited to Hijack AI Workflows

• Network Traffic Analysis with Zeek: From Deployment to Threat Detection

• Invoke SentinelOne Threat Hunt

• SentinelOne Application Control Policies

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• Cisco IOS XE Web UI Privilege Escalation Actively Exploited

• CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• IRS Shares Tax Data of 1.28 Million Individuals with DHS

• LexisNexis Confirms Cloud Breach Exposing 400K User

• European Commission Confirms Data Breach After Europa.eu Hack

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison Hundreds of Python Repos

• Supply Chain Attack Hits Widely-Used AI Package, Risking Thousands of Companies

• Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV Audio

• LexisNexis Confirms Cloud Breach Exposing 400K User

• UNC6426 Weaponizes Old nx npm Supply Chain Compromise to

• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

• Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active Reconnaissance

• Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator

• Interlock Ransomware Has Been Exploiting Cisco FMC Zero-Day CVE-2026-20131 Since January

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC Zero-Day Tied to Ransomware

• Interlock Ransomware Exploited Cisco FMC Zero-Day for 36 Days Before Disclosure

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

• Container Security Scanning with Trivy: Images, IaC, and CI/CD

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• Trivy Supply Chain Attack Targets CI/CD Secrets

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

• Microsoft Patch Tuesday, March 2026 Edition

• ConsentFix v3 Automates Azure OAuth Abuse With Mass Compromise Potential

• Microsoft Hit by Back-to-Back Outages: M365 Admin Center

• Betterleaks: New Open-Source Secrets Scanner Built to Replace Gitleaks

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

• Cisco Source Code Stolen in Trivy-Linked Dev Environment Breach

• ClickFix Attacks Evolve — Now Abusing DNS nslookup for

• How to Detect and Block ClickFix Attacks

• Windows Server Hardening: Complete Security Guide for

• Deploy SentinelOne Policy

• Invoke SentinelOne Threat Hunt

• SentinelOne Control vs Complete Feature Comparison

• Former Cybersecurity Incident Responders Plead Guilty to

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

• Stryker Cyberattack Wiped Tens of Thousands of Devices — No Malware Needed

• Dutch Finance Ministry Takes Treasury Banking Portal Offline After Breach

• The Backup Myth That Is Putting Businesses at Risk

• Navia Data Breach Impacts 2.7 Million People

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• Cisco Patches Critical and High-Severity Vulnerabilities Across Product Lines

• Invoke SentinelOne Threat Hunt

• SentinelOne Control vs Complete Feature Comparison

• SentinelOne Deep Visibility Threat Hunting

• FBI Warns of ATM Jackpotting Surge as Losses Top $20

• Ransomware Forces University of Mississippi Medical Center

• FBI Warns Russian Intelligence Targeting Signal and WhatsApp in Mass Phishing Campaign

• Termite Ransomware Operator Velvet Tempest Chains ClickFix

• LeakNet Ransomware Weaponizes ClickFix and Deno Runtime for Stealthy Corporate Attacks

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• VoidStealer Malware Steals Chrome Master Key via Debugger Trick

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• Trivy Supply Chain Attack Targets CI/CD Secrets

• Hacker Walks Away with $24.5 Million After Breaching Resolv DeFi Platform

• Hacker Charged with Stealing $53 Million from Uranium Finance Crypto Exchange

• Crypto Platform Drift Suspends Services After Hundreds of Millions Stolen

• Healthcare Software Firm CareCloud Informs SEC of Potential Patient Data Leak

• DORA and Operational Resilience: Credential Management as a Financial Risk Control

• CISA Mandates Full Zero Trust Architecture for Federal

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File Upload in Admin Panel

• CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload Allows Unauthenticated RCE

• PromptSpy: First Android Malware to Weaponize Generative AI

• Android March 2026 Security Update Patches 129

• Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• Claude Code Source Code Accidentally Leaked in NPM Package

• Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

• Manager of Botnet Used in Ransomware Attacks Gets 2 Years in Prison

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• CISA Adds Apple DarkSword iOS Exploits, Craft CMS, and Laravel Livewire Flaws to KEV Catalog

• DarkSword GitHub Leak Threatens to Turn Elite iPhone Hacking Into a Tool for the Masses

• TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• VoidLink: AI-Generated Cloud-Native Malware Framework

• CVE-2025-69902: Critical Command Injection in kubectl-mcp-server

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• New Infinity Stealer Malware Grabs macOS Data via ClickFix Lures

• In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware

• Actively Exploited Apache ActiveMQ Flaw Impacts 6,400 Exposed Servers

• CVE-2025-32432: Craft CMS Code Injection Vulnerability

• CVE-2025-54068: Laravel Livewire Code Injection Vulnerability

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2026-36841: TOTOLINK N200RE V5 Command Injection

• CVE-2026-5977: TOTOLINK A7100RU Critical OS Command Injection via setWiFiBasicCfg

• UNC6426 Weaponizes Old nx npm Supply Chain Compromise to

• Trivy Security Scanner GitHub Actions Breached — 75 Tags Hijacked to Steal CI/CD Secrets

• Trivy Supply Chain Attack Targets CI/CD Secrets

• UNC6426 Weaponizes Old nx npm Supply Chain Compromise to

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison Hundreds of Python Repos

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

• CISA Adds Apple DarkSword iOS Exploits, Craft CMS, and Laravel Livewire Flaws to KEV Catalog

• Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

• Apple Expands iOS 18 Updates to More iPhones to Block DarkSword Attacks

• VoidStealer Malware Steals Chrome Master Key via Debugger Trick

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

• PTC Warns of Imminent Threat from Critical Windchill, FlexPLM RCE Bug

• Critical Flaw in protobuf.js Library Enables JavaScript Code Execution

• CVE-2026-25449: Critical Object Injection in Shinetheme Traveler WordPress Plugin

• Supply Chain Attack Hits Widely-Used AI Package, Risking Thousands of Companies

• Dutch Court Threatens xAI with Fines Over Grok's Nonconsensual Nude Images

• European Parliament Rejects Extension of CSAM Scanning Rules for Tech Platforms

• Apache Struts Critical RCE via OGNL Injection Returns

• CVE-2026-37431: Beauty Parlour Management System SQL Injection (CVSS 9.8)

• CVE-2026-37749: SQL Injection Auth Bypass in CodeAstro Attendance System (CVSS 9.8)

• CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability

• CVE-2025-15036: MLflow Path Traversal in Archive Extraction

• CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability

• Building a Secure Homelab in 2026: Complete Guide

• Keycloak SSO: Self-Hosted Identity Provider for Your Homelab

• Build a Collaborative IPS with CrowdSec

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• ShinyHunters Breach Infinite Campus — K-12 Platform Serving 11 Million Students

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes Impact on Canvas LMS

• PromptSpy: First Android Malware to Weaponize Generative AI

• Android March 2026 Security Update Patches 129

• Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Iran Plunged Into Digital Darkness: Internet Drops to 4% in

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• AT&T Breach Data Resurfaces: 176 Million Records with Fully

• Paid AI Accounts Are Now a Hot Underground Commodity

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Mass Exploitation of Fortinet FortiGate Devices Underway

• Fortinet FortiOS SSL VPN Heap Overflow Enables Pre-Auth RCE

• Iran Plunged Into Digital Darkness: Internet Drops to 4% in

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Iran-Linked Hackers Breach FBI Director's Personal Email, Hit Stryker With Wiper Attack

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Pro-Ukraine Hacker Group Bearlyfy Targets Russian Companies with Custom Ransomware

• Bearlyfy Hits Russian Firms with Custom GenieLocker Ransomware

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison Hundreds of Python Repos

• Attack on Axios Developer Tool Threatens Widespread Compromises

• Vercel Confirms Breach as Hackers Claim to Be Selling Stolen Data

• Next.js Creator Vercel Hacked

• Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

• LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

• CVE-2025-12886: Oxygen Theme SSRF Allows Unauthenticated Web Requests

• CVE-2026-25534: Spinnaker SSRF via URL Validation Bypass Using Java Underscore Parsing Bug

• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks

• CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File Upload in Admin Panel

• CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin Interface

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer Overflow Enables Arbitrary Code Execution

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer Overflow Allows Arbitrary Code Execution via Command-Line Arguments

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2021-4473: Tianxin Behavior Management System Unauthenticated Command Injection

• CVE-2026-0596: MLflow Command Injection via Unsanitized model_uri (CVSS 9.6)

• CVE-2026-30303 — Axon Code OS Command Injection via Whitelist Bypass

• CVE-2026-25769: Wazuh Critical RCE via Insecure Deserialization in Cluster Protocol

• CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write

• Suricata IDS/IPS Deployment: From Install to Active Threat Detection

• CVE-2026-30303 — Axon Code OS Command Injection via Whitelist Bypass

• CVE-2026-32298: Angeet ES3 KVM OS Command Injection via cfg.lua Script

• CVE-2026-33478: AVideo CloneSite Plugin Unauthenticated RCE (CVSS 10.0)

• Cline CLI Supply Chain Attack Installs Unauthorized

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• CVE-2026-22172: OpenClaw Critical Authorization Bypass via WebSocket Scope Elevation

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• Microsoft Hit by Back-to-Back Outages: M365 Admin Center

• CVE-2026-30836: Step CA SCEP UpdateReq Allows Unauthenticated Certificate Issuance (CVSS 10)

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC Zero-Day Tied to Ransomware

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• CISA: New Langflow Flaw Actively Exploited to Hijack AI Workflows

• Trivy Security Scanner GitHub Actions Breached — 75 Tags Hijacked to Steal CI/CD Secrets

• Trivy Vulnerability Scanner Breached to Push Infostealer via GitHub Actions

• Trivy Supply Chain Attack Targets CI/CD Secrets

• Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks

• Why Simple Breach Monitoring Is No Longer Enough

• Your Next Breach Will Look Like Business as Usual

• Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

• FCC Proposes $4.5 Million Fine for Voice Provider Hosting Suspicious Foreign Robocalls

• Over 20,000 Crypto Fraud Victims Identified in International Crackdown

• Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

• Hackers Exploit React2Shell in Automated Credential Theft Campaign

• Next.js Creator Vercel Hacked

• Device Code Phishing Attacks Surge 37x as New Kits Spread Online

• CVE-2021-47923: OpenCart 3.0.3.8 Session Fixation Enables Account Takeover

• Critical Auth Bypass in Tutor LMS Pro Exposes 30,000+

• Your Next Breach Will Look Like Business as Usual

• CISA Mandates Full Zero Trust Architecture for Federal

• CVE-2026-30836: Step CA SCEP UpdateReq Allows Unauthenticated Certificate Issuance (CVSS 10)

• CISA Gives Federal Agencies Four Days to Patch Actively Exploited Ivanti Zero-Day

• Ivanti Customers Confront Yet Another Actively Exploited Zero-Day in EPMM

• Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks

• New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

• CVE-2025-43510: Apple Multiple Products Improper Locking Vulnerability

• CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer Overflow (CVSS 9.8)

• Ivanti Connect Secure Under Active Attack - CISA Issues

• Critical Vulnerability Discovered in Popular Enterprise VPN

• Critical PAN-OS GlobalProtect Gateway RCE Vulnerability

• CVE-2026-5017: SQL Injection in code-projects Simple Food Order System (Tickets)

• CVE-2026-5018: SQL Injection in code-projects Simple Food Order System (Register)

• CVE-2026-5019: SQL Injection in code-projects Simple Food Order System (Orders)

• Domain Controller Hardening: Securing Active Directory

• FortiGate Security Hardening: Best Practices for Enterprise

• Windows Server Hardening: Complete Security Guide for

• FortiGate Security Hardening: Best Practices for Enterprise

• Windows Server Hardening: Complete Security Guide for

• AWS Security Hub: Centralized Security Findings

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Ericsson US Discloses Data Breach Affecting Employees and

• Telus Digital Confirms Massive Breach After ShinyHunters

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes Impact on Canvas LMS

• Trellix Confirms Source Code Breach With Unauthorized Repository Access

• Persona Source Code Leak Exposes Hidden Biometric

• OpenAI Says ChatGPT Ads Are Not Rolling Out Globally For Now

• ChatGPT Rolls Out New $100 Pro Subscription to Challenge Claude

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Authorities Disrupt APT28 Router DNS Hijacks Targeting Microsoft 365

• APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE Attacks

• Fortinet FortiClient EMS Zero-Day CVE-2026-35616 Actively Exploited With Full Patch Still Pending

• Oracle Pushes Emergency Fix for Critical Identity Manager RCE Flaw

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks — Patch Now

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• CanisterWorm: First Blockchain-Powered Self-Spreading Worm Hits 47 npm Packages

• Hacker Walks Away with $24.5 Million After Breaching Resolv DeFi Platform

• Google Slashes Quantum Resource Requirements for Breaking Cryptocurrency Encryption

• Cegedim Santé Breach Exposes 15.8 Million French Healthcare Records Including HIV Status

• Elon Musk Fails to Appear for Questioning by French Police Over Sexualized AI Images on X

• French Government Agency France Titres Confirms Data Breach as Hacker Sells Citizen Data

• Mazda Discloses Security Breach Exposing Employee and Partner Data

• Nissan Says Stolen Data Came from Third-Party Vendor After Hacking Group Claims Breach

• GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over Driver Data

• Supply Chain Attack Hits Widely-Used AI Package, Risking Thousands of Companies

• Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV Audio

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks

• Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE Attacks

• Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

• Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

• Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands?

• The State of Trusted Open Source Report: Key Findings for 2025

• Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain

• VoidLink: AI-Generated Cloud-Native Malware Framework

• Device Code Phishing Attacks Surge 37x as New Kits Spread Online

• ConsentFix v3 Automates Azure OAuth Abuse With Mass Compromise Potential

• Exchange Online Security Hardening for Enterprise

• Payouts King Ransomware Uses QEMU Virtual Machines to Bypass Endpoint Security

• Reynolds Ransomware Embeds BYOVD Driver to Disable EDR

• Microsoft Defender for Endpoint: Configuration and

• Former DigitalMint Ransomware Negotiator Pleads Guilty to $75.3M Extortion Scheme

• ADT Confirms Data Breach After ShinyHunters Leak Threat

• New BlackFile Extortion Group Linked to Surge of Vishing Attacks

• Microsoft to Roll Out Entra Passkeys on Windows in Late April

• ConsentFix v3 Automates Azure OAuth Abuse With Mass Compromise Potential

• Microsoft Entra PIM: Configuring Just-in-Time Admin Access

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout

• CVE-2026-22753: Spring Security Filter Chain Bypass via PathPatternRequestMatcher Servlet Path Mismatch

• In Other News: Scattered Spider Member Arrested, SOC Metrics, NSA Tool Flaw

• One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

• Exaforce Raises $125 Million for Agentic SOC Platform

• Microsoft Patches 138 Vulnerabilities Including DNS and Netlogon RCE Flaws

• ClickFix Attacks Evolve — Now Abusing DNS nslookup for

• Email Authentication: Deploying SPF, DKIM, and DMARC to Stop Spoofing

• CVE-2026-21992: Critical Oracle Identity Manager Unauthenticated RCE via REST WebServices

• CVE-2026-26210: KTransformers Unsafe Deserialization RCE via Unauthenticated ZMQ RPC

• CVE-2026-31946: Critical JWT Signature Verification Bypass in OpenOlat E-Learning Platform

• CVE-2026-22172: OpenClaw Critical Authorization Bypass via WebSocket Scope Elevation

• CVE-2026-30884: Critical Authorization Bypass in Moodle mod_customcert Plugin (CVSS 9.6)

• CVE-2026-32924: OpenClaw Authorization Bypass via Feishu Chat Misclassification

• CVE-2026-40621: ELECOM Wireless LAN Access Point Authentication Bypass (CVSS 9.8)

• How to Set Up BGP Monitoring and Route Alerts

• Building a Secure Homelab in 2026: Complete Guide

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• CERT-EU: European Commission Hack Exposes Data of 30 EU Entities

• DORA and Operational Resilience: Credential Management as a Financial Risk Control

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• Former Cybersecurity Incident Responders Plead Guilty to

• New Jersey Men Sentenced to Combined 17 Years for Running North Korean Laptop Farms

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• Deepfake Voice Attacks Are Outpacing Defenses: What Security Leaders Should Know

• Weaponized AI: The New Frontier of Fraud and Identity Spoofing

• Japan Airlines Confirms Data Breach Affecting 28,000

• IDMerit KYC Data Breach Exposes 1 Billion Records Across 26

• Ericsson US Discloses Data Breach Affecting Employees and

• HellCat Ransomware Group Breaches Ascom, Exfiltrates 44GB

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• Microsoft Halts Forced Global Rollout of Microsoft 365 Copilot App

• AT&T Breach Data Resurfaces: 176 Million Records with Fully

• IDMerit KYC Data Breach Exposes 1 Billion Records Across 26

• Ericsson US Discloses Data Breach Affecting Employees and

• The World's First Transatlantic Fiber Cable Is Being Pulled

• Record-Breaking 31.4 Tbps DDoS Attack: Aisuru Botnet Sets

• HashiCorp Vault: Centralized Secrets Management for Modern Infrastructure

• Cognizant TriZetto Breach Exposes Health Data of 3.4

• 3.1 Million Impacted by QualDerm Partners Data Breach

• 250,000 Affected by Data Breach at Nacogdoches Memorial Hospital

• Ericsson US Discloses Data Breach Affecting Employees and

• Marquis Ransomware Breach: 672K People Exposed as Attack Disrupts 80 US Banks

• Hims & Hers Warns of Data Breach After Zendesk Support Ticket Breach

• The Zero-Day Scramble Is Avoidable: Why Attack Surface

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has Hit Its Limit

• Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• Recent Apache ActiveMQ Vulnerability Exploited in the Wild — CISA Adds CVE-2026-34197 to KEV

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Critical RCE in Veeam Backup & Replication — Authenticated

• Critical RCE in Veeam Backup & Replication — Authenticated

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Critical RCE in Veeam Backup & Replication — Authenticated

• Critical RCE in Veeam Backup & Replication — Authenticated

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Critical RCE in Veeam Backup & Replication — Authenticated

• Critical RCE in Veeam Backup & Replication — Authenticated

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

• Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling Catastrophic Breaches

• Device Code Phishing Attacks Surge 37x as New Kits Spread Online

• Vercel Employee's AI Tool Access Led to Data Breach

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

• Anti-Piracy Coalition Takes Down AnimePlay App with 5 Million Users

• Supply Chain Attack Hits Widely-Used AI Package, Risking Thousands of Companies

• Mercor Confirms Security Incident Tied to LiteLLM Supply Chain Attack

• The Good, the Bad and the Ugly in Cybersecurity – Week 14

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• Italian Regulator Fines National Postal Service Orgs $15 Million for Data Privacy Violations

• Azure Backup: VMs, Files, and SQL with Recovery Services

• Attack on Axios Developer Tool Threatens Widespread Compromises

• Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

• Axios NPM Package Breached in North Korean Supply Chain Attack

• Dutch Finance Ministry Takes Treasury Banking Portal Offline After Breach

• Healthcare IT Provider ChipSoft Hit by Ransomware, Services Taken Offline

• Dutch Hospitals Disrupted After Ransomware Hits Healthcare IT Provider ChipSoft

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

• Malicious Chrome Extension 'CL Suite' Steals Meta Business

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

• Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet

• EnOcean SmartServer Flaws Expose Buildings to Remote Hacking

• Commerce Setting Up New AI Export Regime to Push Adoption of 'American AI' Abroad

• Google Detects First AI-Generated Zero-Day Exploit in the Wild

• Google: Hackers Used AI to Develop Zero-Day Exploit for Web Admin Tool

• NAKIVO v11.2: Ransomware Defense, Faster Replication, vSphere 9 and Proxmox VE 9.0 Support

• CVE-2026-32238: Critical Command Injection in OpenEMR Backup Functionality

• Azure Backup: VMs, Files, and SQL with Recovery Services

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now Available

• Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware Attacks

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now Available

• Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware Attacks

• SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

• TeamPCP Hits SAP npm Packages With 'Mini Shai-Hulud' Supply Chain Attack

• 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, and Intercom

• CISA Gives Federal Agencies Four Days to Patch Actively Exploited Ivanti Zero-Day

• Ivanti Customers Confront Yet Another Actively Exploited Zero-Day in EPMM

• Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks

• Why Changing Passwords Doesn't End an Active Directory Breach

• Domain Controller Hardening: Securing Active Directory

• Active Directory Health Check: Comprehensive Diagnostic

• Apache Struts Critical RCE via OGNL Injection Returns

• CVE-2026-22753: Spring Security Filter Chain Bypass via PathPatternRequestMatcher Servlet Path Mismatch

• CVE-2026-40860: Apache Camel JMS Unsafe ObjectMessage Deserialization Enables Network RCE (CVSS 9.8)

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• CVE-2025-15618: Perl Payment Module Uses Insecure MD5/rand() Secret Key

• CVE-2025-15638: Net::Dropbear Bundles Vulnerable libtomcrypt — CVSS 10.0

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• CVE-2025-15638: Net::Dropbear Bundles Vulnerable libtomcrypt — CVSS 10.0

• CVE-2026-35051: Traefik ForwardAuth Authentication Bypass via Proxy Trust Abuse (CVSS 10.0)

• CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-20911: LibRaw HuffTable::initval Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-21413: LibRaw lossless_jpeg_load_raw Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-2993: SQL Injection in AIWU AI Chatbot WordPress Plugin

• CVE-2026-3844 — Breeze Cache WordPress Plugin Unauthenticated File Upload

• CVE-2026-39440: FunnelFormsPro WordPress Plugin Remote Code Inclusion (CVSS 9.9)

• CVE-2026-35051: Traefik ForwardAuth Authentication Bypass via Proxy Trust Abuse (CVSS 10.0)

• CVE-2026-39858: Traefik Forwarded-Header Sanitization Bypass in ForwardAuth and Snippet Middleware (CVSS 10.0)

• Multi-Stack Docker Infrastructure with Traefik and

• How to Deploy Falco for Kubernetes Runtime Security Monitoring

• How to Deploy Wazuh SIEM/XDR for Unified Security Monitoring

• Python for Security Automation: Essential Scripting

• How to Set Up BGP Monitoring and Route Alerts

• Network Monitoring Basics: Detect Threats Before They Spread

• Build a Production Monitoring Stack with Prometheus and Grafana

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling Catastrophic Breaches

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Commerce Setting Up New AI Export Regime to Push Adoption of 'American AI' Abroad

• AppsFlyer Web SDK Supply Chain Attack Spread

• Critical Flaw in protobuf.js Library Enables JavaScript Code Execution

• New npm Supply Chain Attack Self-Spreads to Steal Developer Auth Tokens

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Microsoft Now Force-Upgrades Unmanaged Windows 11 24H2 PCs to 25H2

• Microsoft Rolls Out Revamped Windows Insider Program

• OpenAI Says ChatGPT Ads Are Not Rolling Out Globally For Now

• In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware

• ChatGPT Rolls Out New $100 Pro Subscription to Challenge Claude

• Trivy Supply Chain Attack Targets CI/CD Secrets

• Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting

• 6-Year Ransomware Campaign Targets Turkish Homes and SMBs

• US Sentences Nigerian National to 7 Years in $6 Million Email Fraud Scheme

• FBI: Americans Lost a Record $21 Billion to Cybercrime Last Year

• FBI: Cybercrime Losses Neared $21 Billion in 2025

• PolyShell Attacks Target 56% of All Vulnerable Magento Stores

• WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

• Hackers Use Pixel-Large SVG Trick to Hide Credit Card Stealer on Magento Stores

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks — Patch Now

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under Active Exploitation

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks — Patch Now

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under Active Exploitation

• Attack on Axios Developer Tool Threatens Widespread Compromises

• Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

• CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

• Claude Code Source Code Accidentally Leaked in NPM Package

• Claude Code Leak Used to Push Infostealer Malware on GitHub

• Critical Vulnerability in Claude Code Emerges Days After Source Leak

• Google Slashes Quantum Resource Requirements for Breaking Cryptocurrency Encryption

• Google Begins Post-Quantum Cryptography Rollout Across

• CVE-2025-15618: Perl Payment Module Uses Insecure MD5/rand() Secret Key

• Axios NPM Package Breached in North Korean Supply Chain Attack

• China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks

• Notepad++ Supply Chain Attack Attributed to China-Linked

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

• Google Patches First Chrome Zero-Day of 2026: CVE-2026-2441

• The State of Trusted Open Source Report: Key Findings for 2025

• Axios npm Hack Used Fake Teams Error Fix to Hijack Maintainer Account

• 13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute Commands

• Black Hat USA 2026: What to Expect from the Year's Biggest Security Conference

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has Hit Its Limit

• Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)

• 13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute Commands

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

• CISA Flags Apache ActiveMQ Flaw as Actively Exploited in Attacks

• Payouts King Ransomware Uses QEMU Virtual Machines to Bypass Endpoint Security

• NAKIVO v11.2: Ransomware Defense, Faster Replication, vSphere 9 and Proxmox VE 9.0 Support

• CVE-2026-25199: Apache CloudStack Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access

• NAKIVO v11.2: Ransomware Defense, Faster Replication, vSphere 9 and Proxmox VE 9.0 Support

• Azure Backup: VMs, Files, and SQL with Recovery Services

• Implementing a Robust Backup Strategy: The 3-2-1 Rule

• Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

• 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

• CVE-2026-27651 — NGINX ngx_mail_auth_http_module NULL Pointer Dereference

• Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

• Trojanized MCP Server Deploys StealC Infostealer Targeting

• CVE-2025-69902: Critical Command Injection in kubectl-mcp-server

• Microsoft Releases Emergency Updates to Fix Windows Server Issues

• Windows Server Hardening: Complete Security Guide for

• Active Directory Health Check: Comprehensive Diagnostic

• New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link Routers

• CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

• CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability

• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks

• New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

• CVE-2026-42193: Plunk Email Platform SNS Webhook Forgery

• Firefox Vulnerability Allows Tor User Fingerprinting Across 'New Identity' Resets

• CVE-2026-5731: Firefox and Thunderbird Critical Memory Safety Vulnerabilities

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• Firefox Vulnerability Allows Tor User Fingerprinting Across 'New Identity' Resets

• CVE-2026-5731: Firefox and Thunderbird Critical Memory Safety Vulnerabilities

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories

• Cyberattacks on Critical Infrastructure Double in Q1 2026

• CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables Unauthenticated RCE

• Windows BitLocker Zero-Day Gives Access to Protected Drives, PoC Released

• Researcher Drops YellowKey, GreenPlasma Windows Zero-Days

• Windows Zero-Days Expose BitLocker Bypasses and CTFMON Privilege Escalation

• 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

• CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric Bounds Check (CVSS 9.8)

• Google Begins Post-Quantum Cryptography Rollout Across

• CVE-2026-35560: Amazon Athena ODBC Driver Fails Certificate Validation, Enabling MiTM Credential Theft

• Juju Dqlite Cluster TLS Auth Bypass — Unauthenticated Database Access (CVE-2026-4370)

• CISA Issues Emergency Directive as Cisco SD-WAN Zero-Day

• Cisco SD-WAN Zero-Day CVE-2026-20127 Triggers Five Eyes

• CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

• CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username Enumeration via Login Endpoint

• CVE-2025-47813: Wing FTP Server Path Disclosure Enables RCE Chain

• CVE-2026-33669: SiYuan Unauthenticated Document Content Exposure (CVSS 9.8)

• CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability

• CVE-2025-43510: Apple Multiple Products Improper Locking Vulnerability

• CVE-2026-22753: Spring Security Filter Chain Bypass via PathPatternRequestMatcher Servlet Path Mismatch

• CVE-2026-25197: IDOR Flaw Lets Authenticated Users Access Any Account Profile

• CVE-2026-28766: Gardyn Smart Garden API Exposes All User Accounts Without Authentication

• CVE-2026-33669: SiYuan Unauthenticated Document Content Exposure (CVSS 9.8)

• FBI Warns of ATM Jackpotting Surge as Losses Top $20

• Cryptocurrency ATM Giant Bitcoin Depot Reports $3.6 Million Stolen in Cyberattack

• Cybercriminals Target Accountants to Drain Russian Firms' Bank Accounts

• PromptSpy: First Android Malware to Weaponize Generative AI

• Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks

• All Four Major Nation-State Adversaries Now Weaponizing

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Bearlyfy Hits Russian Firms with Custom GenieLocker Ransomware

• The World's First Transatlantic Fiber Cable Is Being Pulled

• Google Disrupts Massive Chinese Espionage Campaign

• FCC Proposes $4.5 Million Fine for Voice Provider Hosting Suspicious Foreign Robocalls

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Operation Synergia III: Police Sinkhole 45,000 IPs in Global Cybercrime Crackdown

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Tables Turn on 'The Gentlemen' RaaS Gang With Data Leak

• Nova (RALord) Ransomware Group Confirmed Active with 73

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• DarkSword GitHub Leak Threatens to Turn Elite iPhone Hacking Into a Tool for the Masses

• ZeroDayRAT Mobile Spyware Enables Total Surveillance of iOS

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• Black Hat USA 2026: What to Expect from the Year's Biggest Security Conference

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables Full System Takeover

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• US Sentences Nigerian National to 7 Years in $6 Million Email Fraud Scheme

• Money Launderer for Crypto Thieves Given 5-Year Prison Sentence

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• CISA Gives Federal Agencies Four Days to Patch Actively Exploited Ivanti Zero-Day

• Researchers Disclose Critical n8n Flaws Enabling RCE and

• CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote Code Execution

• Google Chrome GPU Use-After-Free Sandbox Escape (CVE-2026-7333)

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Crypto Platform Drift Suspends Services After Hundreds of Millions Stolen

• Drift Crypto Platform Confirms $280 Million Stolen as Researchers Point to North Korea

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• Microsoft, Salesforce Patch AI Agent Data Leak Flaws

• Microsoft Discovers 'AI Recommendation Poisoning' via

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

• Microsoft Halts Forced Global Rollout of Microsoft 365 Copilot App

• FCC Proposes New Rule to Further Crack Down on Illegal Robocalls

• GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over Driver Data

• Cloud Security Startup Native Exits Stealth With $42 Million to Enforce Security-by-Design Across Multi-Cloud

• Eclypsium Raises $25 Million to Expand Device Supply Chain Security Platform

• Exaforce Raises $125 Million for Agentic SOC Platform

• Oracle Pushes Emergency Fix for Critical Identity Manager RCE Flaw

• CVE-2026-21992: Critical Oracle Identity Manager Unauthenticated RCE via REST WebServices

• CVE-2026-21994: Critical Unauthenticated RCE in Oracle Edge Cloud Infrastructure Designer v0.3.0

• Malaysia Airlines Listed by Qilin Ransomware Group — Passenger Data at Risk

• Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware

• Romania's National Oil Pipeline Operator Conpet Hit by

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as Possible

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active Reconnaissance

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as Possible

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active Reconnaissance

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as Possible

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active Reconnaissance

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Dutch Court Threatens xAI with Fines Over Grok's Nonconsensual Nude Images

• UK Government Threatens Tech Bosses With Jail Time Over AI Nudification Tools

• Elon Musk Fails to Appear for Questioning by French Police Over Sexualized AI Images on X

• Dutch Court Threatens xAI with Fines Over Grok's Nonconsensual Nude Images

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• Italian Regulator Fines National Postal Service Orgs $15 Million for Data Privacy Violations

• European Parliament Rejects Extension of CSAM Scanning Rules for Tech Platforms

• Broken VECT 2.0 Ransomware Acts as a Data Wiper for Large Files

• Google Begins Post-Quantum Cryptography Rollout Across

• European Commission Confirms Data Breach After Europa.eu Hack

• CERT-EU: European Commission Hack Exposes Data of 30 EU Entities

• EU Cyber Agency Attributes Major Data Breach to TeamPCP Hacking Group

• Cisco Source Code Stolen in Trivy-Linked Dev Environment Breach

• Trellix Confirms Source Code Breach With Unauthorized Repository Access

• Trellix Source Code Breach Claimed by RansomHouse Hackers

• Google Slashes Quantum Resource Requirements for Breaking Cryptocurrency Encryption

• Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi

• Gartner Identifies the Top 6 Cybersecurity Trends Reshaping

• Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations

• Broken VECT 2.0 Ransomware Acts as a Data Wiper for Large Files

• Vect 2.0 Ransomware Acts as Wiper Thanks to Design Error

• Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

• CVE-2016-20024: ZKTeco ZKTime.Net Insecure File Permissions Allow Privilege Escalation

• CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat Credentials Allow Unauthenticated RCE

• New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE Attacks

• BeyondTrust Remote Support Pre-Authentication RCE Under

• CVE-2026-39987: Marimo Pre-Auth Remote Code Execution — CISA KEV Added

• Black Hat USA 2026: What to Expect from the Year's Biggest Security Conference

• Nmap Scanning Techniques for Security Professionals

• OSINT Reconnaissance Methodology for Security Professionals

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil, GandCrab

• Microsoft Patch Tuesday, March 2026 Edition

• Trump Budget Proposal Would Cut Hundreds of Millions More from CISA

• Why the Axios Attack Proves AI Is Mandatory for Supply Chain Security

• Former DigitalMint Ransomware Negotiator Pleads Guilty to $75.3M Extortion Scheme

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

• Hackers Exploiting Acrobat Reader Zero-Day Flaw Since December

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

• In Other News: Satellite Cybersecurity Act, $90K Chrome Flaw, Teen Hacker Arrested

• ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE

• Microsoft Drops Its Second-Largest Monthly Patch Batch on Record

• Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

• Over 1,300 Microsoft SharePoint Servers Vulnerable to Ongoing Spoofing Attacks

• NIST to Stop Rating Non-Priority Flaws Due to Volume Increase

• CISA Mandates Full Zero Trust Architecture for Federal

• Incident Response Playbook: Ransomware

• Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk

• BeyondTrust Remote Support and PRA Critical RCE Under

• BeyondTrust Remote Support Pre-Authentication RCE Under

• Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

• Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

• Microsoft to Roll Out Entra Passkeys on Windows in Late April

• Microsoft Entra PIM: Configuring Just-in-Time Admin Access

• Conditional Access Policies: Zero Trust with Entra ID

• Money Launderer for Crypto Thieves Given 5-Year Prison Sentence

• Former Incident Responders Sentenced to 4 Years for Ransomware Attacks on Clients

• Cyber Incident Responders Sentenced to 4 Years for Carrying Out Ransomware Attacks

• Top Five Sales Challenges Costing MSPs Cybersecurity Revenue

• NinjaOne Scripting: PowerShell Automation Library

• Cove Data Protection Implementation

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes Impact on Canvas LMS

• Canvas Breach Disrupts Schools & Colleges Nationwide

• Multiple Universities Forced to Reschedule Final Exams After Canvas Cyber Incident

• One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

• Exaforce Raises $125 Million for Agentic SOC Platform

• Incident Response Playbook: Ransomware

• West Pharmaceutical Services Hit by Disruptive Ransomware Attack

• West Pharmaceutical Warns of Ransomware Attack Impacting Business Operations

• Foxconn Confirms Cyberattack Claimed by Nitrogen Ransomware Gang

• Google Chrome Critical Update Patches High-Severity Code

• Google Patches Actively Exploited Chrome Zero-Day

• Google Patches First Chrome Zero-Day of 2026: CVE-2026-2441

• CVE-2024-46636: NASA EOSDIS MODAPS v8.1 SQL Injection

• CVE-2026-41478: Saltcorn SQL Injection Allows Full Database Compromise (CVSS 9.9)

• Juju Dqlite Cluster TLS Auth Bypass — Unauthenticated Database Access (CVE-2026-4370)

• CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability

• CVE-2026-25776: Movable Type Critical Code Injection (CVSS 9.8)

• CVE-2026-39918: Vvveb CMS Unauthenticated PHP Code Injection via Install Endpoint

• CVE-2025-36568: Dell PowerProtect Data Domain BoostFS Credential Exposure

• CVE-2026-35155: Dell iDRAC10 Race Condition Enables Privilege Escalation

• Dell ECS and ObjectScale: Hard-Coded Credentials Vulnerability (CVE-2026-40636)

• CVE-2026-1579: MAVLink Protocol Unauthenticated Shell Access

• CVE-2026-37749: SQL Injection Auth Bypass in CodeAstro Attendance System (CVSS 9.8)

• CVE-2026-3844 — Breeze Cache WordPress Plugin Unauthenticated File Upload

• CVE-2026-24303: Microsoft Partner Center Privilege Escalation via Improper Access Control

• CVE-2026-25197: IDOR Flaw Lets Authenticated Users Access Any Account Profile

• CVE-2026-33109: Azure Managed Instance for Apache Cassandra Remote Code Execution (CVSS 9.9)

• CVE-2026-25769: Wazuh Critical RCE via Insecure Deserialization in Cluster Protocol

• CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write

• How to Deploy Wazuh SIEM/XDR for Unified Security Monitoring

• CVE-2026-33669: SiYuan Unauthenticated Document Content Exposure (CVSS 9.8)

• CVE-2026-33670: SiYuan readDir Path Traversal Notebook Enumeration (CVSS 9.8)

• CVE-2026-40259 — SiYuan Knowledge Management Authorization Bypass

• CVE-2026-33669: SiYuan Unauthenticated Document Content Exposure (CVSS 9.8)

• CVE-2026-33670: SiYuan readDir Path Traversal Notebook Enumeration (CVSS 9.8)

• CVE-2026-40259 — SiYuan Knowledge Management Authorization Bypass

• CVE-2026-3730: SQL Injection in itsourcecode Free Hotel

• CVE-2026-3740: SQL Injection in itsourcecode University

• CVE-2026-5551: SQL Injection in itsourcecode Free Hotel Reservation System Login

• CVE-2026-3734: Improper Authorization in SourceCodester

• CVE-2026-3746: SQL Injection in SourceCodester Simple

• CVE-2026-5575: SQL Injection in SourceCodester Record Management System Login

• CVE-2026-5731: Firefox and Thunderbird Critical Memory Safety Vulnerabilities

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• CVE-2026-6785: Memory Safety Bugs in Firefox and Thunderbird Enable Arbitrary Code Execution

• CVE-2026-5731: Firefox and Thunderbird Critical Memory Safety Vulnerabilities

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• CVE-2026-6785: Memory Safety Bugs in Firefox and Thunderbird Enable Arbitrary Code Execution

• Microsoft Defender for Endpoint: Configuration and

• Intune Device Enrollment: Windows Autopilot Setup

• Microsoft 365 Security Baseline Implementation

• SentinelOne Control vs Complete Feature Comparison

• SentinelOne Device Control Configuration

• SentinelOne MSP Client Onboarding

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• Cybersecurity Predictions 2026: The Hype We Can Ignore and

• Ransomware Attacks Surge 49% Year-Over-Year: BlackFog 2026

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Mercor Confirms Security Incident Tied to LiteLLM Supply Chain Attack

• Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• UK Government Threatens Tech Bosses With Jail Time Over AI Nudification Tools

• International AI Safety Report 2026 Warns of AI-Driven

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• New BlackFile Extortion Group Linked to Surge of Vishing Attacks

• Deepfake Voice Attacks Are Outpacing Defenses: What Security Leaders Should Know

• Persona Source Code Leak Exposes Hidden Biometric

• Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data

• ZeroDayRAT Mobile Spyware Enables Total Surveillance of iOS

• Cline CLI Supply Chain Attack Installs Unauthorized

• Microsoft Suspends Dev Accounts for High-Profile Open Source Projects

• Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• ClickFix Campaign Targets European Hotels with Fake

• Iran Plunged Into Digital Darkness: Internet Drops to 4% in

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Researchers Detect ZionSiphon Malware Targeting Israeli Water and Desalination OT Systems

• Former Cybersecurity Incident Responders Plead Guilty to

• Former Ransomware Negotiator Pleads Guilty to BlackCat Attacks Against U.S. Companies

• US Ransomware Negotiators Get 4 Years in Prison Over BlackCat Attacks

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• Cloudflare BGP Routing Error Cascades Across AWS, X, and

• Record-Breaking 31.4 Tbps DDoS Attack: Aisuru Botnet Sets

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Spain Dismantles Major $4.7M Manga Piracy Platform, Arrests Four

• Zara Data Breach Exposed Personal Information of 197,000 People

• Cognizant TriZetto Breach Exposes Health Data of 3.4

• Hims & Hers Breach Exposes the Most Sensitive Kinds of Patient PHI

• 716,000 Impacted by OpenLoop Health Data Breach

• ShinyHunters Claims Mass Data Theft From 400 Firms via

• CVE-2026-31845: Rukovoditel CRM Reflected XSS in Zadarma API (CVSS 9.3)

• CVE-2026-33656: EspoCRM Formula Engine Attachment sourceId Overwrite (CVSS 9.1)

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison Hundreds of Python Repos

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

• Trigona Ransomware Deploys Custom CLI Exfiltration Tool in Active Attacks

• Shadow AI Is Everywhere. Here's How to Find and Secure It.

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling Catastrophic Breaches

• Video Service Vimeo Confirms Anodot Breach Exposed User Data

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents

• Google Patches First Chrome Zero-Day of 2026: CVE-2026-2441

• Google Chrome Use-After-Free Zero-Day Under Active

• Trivy Security Scanner GitHub Actions Breached — 75 Tags Hijacked to Steal CI/CD Secrets

• Cisco Source Code Stolen in Trivy-Linked Dev Environment Breach

• European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

• Crunchyroll Probes Breach After Hacker Claims to Steal 6.8M Users' Data

• Anti-Piracy Coalition Takes Down AnimePlay App with 5 Million Users

• IPTV Stream Validation and M3U Playlist Management with

• Mazda Discloses Security Breach Exposing Employee and Partner Data

• CVE-2026-25199: Apache CloudStack Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access

• CVE-2026-6886: Borg SPM 2007 Authentication Bypass Allows Login as Any User

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI and More

• Worm Redux: Fresh Mini Shai-Hulud Infections Bite npm Supply Chain

• DarkSword GitHub Leak Threatens to Turn Elite iPhone Hacking Into a Tool for the Masses

• TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

• Apple Expands iOS 18 Updates to More iPhones to Block DarkSword Attacks

• PolyShell Attacks Target 56% of All Vulnerable Magento Stores

• WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

• Hackers Use Pixel-Large SVG Trick to Hide Credit Card Stealer on Magento Stores

• Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV Audio

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

• APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under Active Exploitation

• Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE Attacks

• Iran-Linked Hackers Breach FBI Director's Personal Email, Hit Stryker With Wiper Attack

• Researchers Uncover Pre-Stuxnet 'fast16' Malware Targeting Engineering Software

• US Treasury Department Confirms Network Breach by

• FCC Bans Import of Foreign-Made Consumer Routers Over Supply Chain Security Risks

• FCC Proposes $4.5 Million Fine for Voice Provider Hosting Suspicious Foreign Robocalls

• FCC Proposes New Rule to Further Crack Down on Illegal Robocalls

• File Read Flaw in Smart Slider Plugin Impacts 500K WordPress Sites

• CVE-2026-3629: WordPress User Import Plugin Privilege Escalation

• CVE-2026-6443: WordPress Accordion Plugin Backdoor in Version 1.4.6

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• European Commission Accuses Meta of Breaching Child Safety Rules

• Louis Vuitton, Dior, and Tiffany Fined $25 Million Over

• Axios NPM Package Breached in North Korean Supply Chain Attack

• Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

• North Korean Hackers Use Fake Zoom Meeting to Target Crypto

• Hackers Exploit TrueConf Zero-Day to Push Malicious Software Updates

• PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

• CVE-2026-3502: TrueConf Client Update Integrity Bypass Enables Arbitrary Code Execution

• Drift Crypto Platform Confirms $280 Million Stolen as Researchers Point to North Korea

• Drift Loses $280 Million as Hackers Seize Security Council Powers

• KelpDAO Suffers $290 Million Heist Tied to Lazarus Hackers

• Drift Crypto Platform Confirms $280 Million Stolen as Researchers Point to North Korea

• Drift Loses $280 Million as Hackers Seize Security Council Powers

• 'It Reads Like a Spy Novel': $280M Drift Theft Linked to North Korean Fake Companies

• Drift Crypto Platform Confirms $280 Million Stolen as Researchers Point to North Korea

• KelpDAO Suffers $290 Million Heist Tied to Lazarus Hackers

• Crypto Infrastructure Company Blames $290 Million Theft on North Korean Hackers

• 250,000 Affected by Data Breach at Nacogdoches Memorial Hospital

• Medtronic Confirms Breach After Hackers Claim 9 Million Records Theft

• Medtronic Hack Confirmed After ShinyHunters Threatens Data Leak

• Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware

• BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

• Police Shut Down Reboot of Crimenetwork Marketplace, Arrest Admin

• Axios npm Hack Used Fake Teams Error Fix to Hijack Maintainer Account

• Russian APT 'ChainReaver' Hijacks 50 GitHub Accounts and

• Supply Chain Attack Discovered in Popular NPM Packages

• Hims & Hers Warns of Data Breach After Zendesk Support Ticket Breach

• 300,000+ Passport Numbers Leaked in December Eurail Data Breach

• Hims & Hers Breach Exposes the Most Sensitive Kinds of Patient PHI

• Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil, GandCrab

• BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

• German Authorities Identify REvil and GandCrab Ransomware Bosses Behind $40M in Damages

• Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil, GandCrab

• BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

• German Authorities Identify REvil and GandCrab Ransomware Bosses Behind $40M in Damages

• Trump Budget Proposal Would Cut Hundreds of Millions More from CISA

• Commerce Setting Up New AI Export Regime to Push Adoption of 'American AI' Abroad

• US Treasury Department Confirms Network Breach by

• Disgruntled Researcher Leaks BlueHammer Windows Zero-Day Exploit

• Windows BitLocker Zero-Day Gives Access to Protected Drives, PoC Released

• Windows Zero-Days Expose BitLocker Bypasses and CTFMON Privilege Escalation

• Microsoft Links Storm-1175 to Medusa Ransomware Zero-Day Campaign

• China-Linked Storm-1175 Chains Zero-Days for High-Velocity Medusa Ransomware Attacks

• Storm-1175 Deploys Medusa Ransomware at 'High Velocity'

• The Hidden Cost of Recurring Credential Incidents

• Gartner Identifies the Top 6 Cybersecurity Trends Reshaping

• Microsoft Entra PIM: Configuring Just-in-Time Admin Access

• The Hidden Cost of Recurring Credential Incidents

• One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

• Security Baseline Hardening: CIS Controls Implementation

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

• Hackers Exploiting Acrobat Reader Zero-Day Flaw Since December

• CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution RCE (CVSS 9.6)

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

• Hackers Exploiting Acrobat Reader Zero-Day Flaw Since December

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has Hit Its Limit

• 73 Seconds to Breach, 24 Hours to Patch: The Case for Autonomous Validation

• NinjaOne RMM Platform Setup

• Microsoft Teams Right-Click Paste Broken by Edge Update Bug

• Threat Actor Uses Microsoft Teams to Deploy New 'Snow' Malware

• KongTuke Hackers Now Use Microsoft Teams for Corporate Breaches

• The Backup Myth That Is Putting Businesses at Risk

• BridgePay Payment Gateway Knocked Offline by Ransomware

• Backup & Disaster Recovery Checklist

• Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk

• NinjaOne Scripting: PowerShell Automation Library

• NinjaOne RMM Platform Setup

• Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi

• CISA Adds Actively Exploited VMware Aria Operations RCE

• China-Linked Hackers Exploit VMware ESXi Zero-Days to

• ADT Confirms Data Breach After ShinyHunters Leak Threat

• ADT Says Customer Data Stolen in Cyber Intrusion

• Home Security Giant ADT Data Breach Affects 5.5 Million People

• New BlackFile Extortion Group Linked to Surge of Vishing Attacks

• Zara Data Breach Exposed Personal Information of 197,000 People

• ShinyHunters Dumps 600K+ Canada Goose Customer Records on

• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

• ETH Zurich Finds 25 Password Recovery Attacks Against

• Self-Hosted Password Manager with Vaultwarden

• Microsoft Now Lets Admins Uninstall Copilot on Enterprise Devices

• Microsoft Announces Major Security Features for Copilot

• UK Brings AI Chatbots Under Online Safety Act — Fines Up to

• Money Launderer Linked to $230M Crypto Heist Gets 70 Months in Prison

• European Police Dismantles €50 Million Crypto Investment Fraud Ring

• US & China Partner on Scam Center Takedown in Dubai

• CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

• CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability

• CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material

• EnOcean SmartServer Flaws Expose Buildings to Remote Hacking

• Cyberattacks on Critical Infrastructure Double in Q1 2026

• CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables Unauthenticated RCE

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes Impact on Canvas LMS

• Multiple Universities Forced to Reschedule Final Exams After Canvas Cyber Incident

• Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65 TB Canvas Leak

• Trellix Confirms Source Code Breach With Unauthorized Repository Access

• Trellix Source Code Breach Claimed by RansomHouse Hackers

• Trellix Source Code Breach Highlights Growing Supply Chain Threats

• GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over Driver Data

• GM to Pay Over $12 Million in California Privacy Settlement Involving Driver Data

• GM Agrees to $12.75M California Settlement Over Sale of Drivers' Data

• Google Detects First AI-Generated Zero-Day Exploit in the Wild

• Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

• Malicious Chrome Extension 'CL Suite' Steals Meta Business

• UK Water Utility Fined £963,900 After Cl0p Lurked Undetected for Nearly Two Years

• UK Fines Water Supplier $1.3M for Exposing Data of 664K Customers

• UK Brings AI Chatbots Under Online Safety Act — Fines Up to

• Why Changing Passwords Doesn't End an Active Directory Breach

• Configuring Windows LAPS: Automated Local Admin Password

• Group Policy Security Hardening for Windows Environments

• Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator

• Cisco Patches Critical Webex Vulnerability Allowing Remote

• CVE-2026-42569: phpVMS Critical Unauthenticated Legacy Import Access

• Microsoft May 2026 Patch Tuesday Fixes 120 Flaws, No Zero-Days

• Apple Releases Critical Security Updates Across All

• Google Chrome Critical Update Patches High-Severity Code

• 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

• CVE-2018-25169: Denial of Service Vulnerability Catalogued

• CVE-2026-35392: Critical Path Traversal in goshs Go HTTP Server

• PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

• CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote Code Execution

• CVE-2026-39890: PraisonAI YAML Injection Achieves Remote Code Execution

• Cloudflare BGP Routing Error Cascades Across AWS, X, and

• Microsoft Hit by Back-to-Back Outages: M365 Admin Center

• YouTube Suffers Major Global Outage Affecting 300,000+ Users

• 2026 Vulnerability Forecast: Up to 117,000 CVEs Expected

• Ransomware Costs Projected to Hit $74 Billion in 2026, 30%

• Ransomware Attacks Surge 49% Year-Over-Year: BlackFog 2026

• Russian-Linked CANFAIL Malware Targets Ukrainian Defense

• Apple Patches Actively Exploited iOS Zero-Day Used in

• Apple Patches Actively Exploited Zero-Day in dyld

• BeyondTrust Remote Support and PRA Critical RCE Under

• BeyondTrust Remote Support Pre-Authentication RCE Under

• BeyondTrust Zero-Day Allows Unauthenticated Command

• CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File Upload in Admin Panel

• CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI

• Hackage Haskell Repository Stored XSS Enables Credential Theft (CVE-2026-40470)

• CVE-2016-20024: ZKTeco ZKTime.Net Insecure File Permissions Allow Privilege Escalation

• CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat Credentials Allow Unauthenticated RCE

• CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username Enumeration via Login Endpoint

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer Overflow Enables Arbitrary Code Execution

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer Overflow Allows Arbitrary Code Execution via Command-Line Arguments

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer Overflow Enables Arbitrary Code Execution

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer Overflow Allows Arbitrary Code Execution via Command-Line Arguments

• CVE-2026-3038: FreeBSD Kernel Stack Buffer Overflow in

• CVE-2018-25169: Denial of Service Vulnerability Catalogued

• CVE-2026-26477: DokuWiki media_upload_xhr() Denial of Service

• CVE-2026-35547: FreeBSD libnv Heap Buffer Overflow Allows Out-of-Bounds Write

• CVE-2018-25272: ELBA5 5.8.0 RCE via Default Database Credentials and xp_cmdshell

• CVE-2026-2993: SQL Injection in AIWU AI Chatbot WordPress Plugin

• CVE-2026-34260 — SAP S/4HANA SQL Injection via ABAP Enterprise Search

• CVE-2025-12886: Oxygen Theme SSRF Allows Unauthenticated Web Requests

• CVE-2026-6518: WordPress CMP Plugin Arbitrary File Upload and Remote Code Execution (CVSS 8.8)

• WordPress Plugin Vulnerability (CVSS 10.0) Under Active

• CVE-2025-15036: MLflow Path Traversal in Archive Extraction

• CVE-2025-15379: MLflow Command Injection in Model Serving (CVSS 10.0)

• CVE-2026-0596: MLflow Command Injection via Unsanitized model_uri (CVSS 9.6)

• CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout

• CVE-2026-1114: lollms JWT Weak Secret Key Allows Admin Takeover

• CVE-2026-31946: Critical JWT Signature Verification Bypass in OpenOlat E-Learning Platform

• CVE-2026-1540: Spam Protect CF7 WordPress Plugin PHP Log RCE

• CVE-2026-22679: Weaver E-cology 10.0 Unauthenticated Remote Code Execution

• CVE-2026-27876 — Grafana Critical RCE via SQL Expression Chain

• CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-20911: LibRaw HuffTable::initval Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-21413: LibRaw lossless_jpeg_load_raw Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-20911: LibRaw HuffTable::initval Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-21413: LibRaw lossless_jpeg_load_raw Heap Buffer Overflow (CVSS 9.8)

• Critical RCE in Veeam Backup & Replication — Authenticated

• Critical RCE in Veeam Backup & Replication — Authenticated

• Critical RCE in Veeam Backup & Replication — Third Domain

• CVE-2026-21994: Critical Unauthenticated RCE in Oracle Edge Cloud Infrastructure Designer v0.3.0

• CVE-2026-25199: Apache CloudStack Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access

• CVE-2026-34162: FastGPT Unauthenticated HTTP Proxy Enables Full SSRF (CVSS 10.0)

• CVE-2026-25534: Spinnaker SSRF via URL Validation Bypass Using Java Underscore Parsing Bug

• CVE-2026-32604: Spinnaker Clouddriver Remote Code Execution (CVSS 9.9)

• CVE-2026-32613: Spinnaker Echo Spring Expression Language Injection (CVSS 9.9)

• CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write

• CVE-2026-32922: OpenClaw Privilege Escalation via Token Scope Bypass

• CVE-2026-3629: WordPress User Import Plugin Privilege Escalation

• CVE-2026-27651 — NGINX ngx_mail_auth_http_module NULL Pointer Dereference

• CVE-2026-28872: Apple iOS & iPadOS Remote Denial-of-Service via Resource Exhaustion

• CVE-2026-41309: OSSN Resource Exhaustion via Crafted Pixel Bomb Image Upload

• CVE-2026-27876 — Grafana Critical RCE via SQL Expression Chain

• Build a Production Monitoring Stack with Prometheus and Grafana

• Build a Centralized Log Management System with Loki and

• CVE-2026-28766: Gardyn Smart Garden API Exposes All User Accounts Without Authentication

• CVE-2026-34162: FastGPT Unauthenticated HTTP Proxy Enables Full SSRF (CVSS 10.0)

• CVE-2026-42569: phpVMS Critical Unauthenticated Legacy Import Access

• CVE-2026-29067: ZITADEL Password Reset Poisoned by

• ZITADEL Critical XSS in SAML Endpoint Enables 1-Click

• CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI

• CVE-2026-29067: ZITADEL Password Reset Poisoned by

• ZITADEL Critical XSS in SAML Endpoint Enables 1-Click

• CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI

• CVE-2026-30836: Step CA SCEP UpdateReq Allows Unauthenticated Certificate Issuance (CVSS 10)

• HashiCorp Vault: Centralized Secrets Management for Modern Infrastructure

• HashiCorp Vault: Secrets Management for Your Homelab and

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2026-32956: Critical Heap Buffer Overflow in silex SD-330AC and AMC Manager

• CVE-2026-7136: Totolink A8000RU OS Command Injection via CGI Handler wanIdx Argument (CVSS 9.8)

• CVE-2026-34177: Canonical LXD Incomplete VM Restriction Denylist

• CVE-2026-34178: Canonical LXD Backup Import Path Restriction Bypass

• CVE-2026-5412: Juju Controller Facade Allows Low-Privilege Cloud Credential Theft

• CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material

• FortiGate SSL VPN Setup: Secure Remote Access Configuration

• WireGuard VPN Setup: Secure Remote Access

• CVE-2026-37431: Beauty Parlour Management System SQL Injection (CVSS 9.8)

• CVE-2026-41583: ZEBRA Zcash Node Consensus Rule Bypass (CVSS 9.1)

• CVE-2026-41588: RELATE Courseware Timing Attack in Authentication (CVSS 9.0)

• CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels * depth Miscalculation (CVSS 9.8)

• CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric Bounds Check (CVSS 9.8)

• CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS 9.8)

• CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels * depth Miscalculation (CVSS 9.8)

• CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric Bounds Check (CVSS 9.8)

• CVE-2026-41228 — Froxlor Path Traversal via def_language Parameter

• CVE-2026-41229 — Froxlor PHP Code Injection via MySQL Server Settings

• SSH Hardening Best Practices

• CVE-2026-41635: Apache MINA Class Allowlist Bypass Enables Arbitrary Code Execution (CVSS 9.8)

• Apache MINA Incomplete Deserialization Patch Leaves 2.1.X and 2.2.X Branches Vulnerable

• CVE-2026-42779: Critical Apache MINA Deserialization Class Bypass

• CVE-2026-43824: Argo CD ServerSideDiff Exposes Cleartext Kubernetes Secrets

• Kubernetes Secrets Management with External Secrets Operator

• Kubernetes Homelab Cluster with K3s

• CVE-2026-6885: Borg SPM 2007 Arbitrary File Upload Enables Remote Code Execution

• CVE-2026-6886: Borg SPM 2007 Authentication Bypass Allows Login as Any User

• CVE-2026-6887: Borg SPM 2007 SQL Injection Exposes Full Database Access Without Authentication

• Fortinet FortiOS SSL VPN Heap Overflow Enables Pre-Auth RCE

• FortiGate Performance Optimization: Tuning Guide for

• FortiGate Security Hardening: Best Practices for Enterprise

• Container Security Scanning with Trivy: Images, IaC, and CI/CD

• Docker Security Fundamentals: Protecting Your Containers

• Docker Windows Containers: Native Engine Setup Guide

• Suricata IDS/IPS Deployment: From Install to Active Threat Detection

• Network Monitoring Basics: Detect Threats Before They Spread

• Network Traffic Analysis with Zeek and Suricata

• How to Deploy Wazuh SIEM/XDR for Unified Security Monitoring

• Microsoft Defender for Endpoint: Configuration and

• SentinelOne Complete Deployment Guide

• Conditional Access Policies: Zero Trust with Entra ID

• Microsoft 365 Security and Compliance Configuration Guide

• Microsoft 365 Tenant Security Checklist

• SentinelOne Threat Hunting with Deep Visibility

• Velociraptor DFIR: Endpoint Forensics and Incident Response at Scale

• Network Traffic Analysis with Zeek and Suricata