PT-2026-30802

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GENESIS64 versions prior to 10.97.3 Mitsubishi Electric ICONICS Suite versions prior to 10.97.3 Mitsubishi Electric MobileHMI versions prior to 10.97.3 Mitsubishi Electric Hyper Historian versions prior to 10.97.3 Mitsubish...

GHSA-GQ8W-X74C-H6P7

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw...

GHSA-JG56-WF8X-QRV5

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M...

CVE-2025-48651

creationtimestamp| type| source ---|---|--- 2026-04-06 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0399/ 2026-04-09 10:24:22+00:00| seen| https://bsky.app/profile/stefan.infosec.exchange.ap.brid.gy/post/3mj2lplh4wbx2 2026-04-10 16:18:38+00:00| seen|...

Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins

New Phishing scam uses fake missile alerts and the ongoing conflict involving Iran to target users with QR codes and fake government emails to steal Microsoft passwords...

CVE-2026-21381

creationtimestamp| type| source ---|---|--- 2026-04-06 16:24:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitogsu44t2h 2026-04-06 17:32:33+00:00| seen| Telegram/mCOSTqPiKnBsCJ7wgUXnJ9sN78eybUSXsSSUkGvS3qtdJ4k 2026-04-09 04:20:09+00:00| seen|...

Why Security Researchers and Red Teams Are Turning to Workflow Automation

Security researchers and red teams adopt workflow automation to cut alert fatigue, enrich data, and scale operations across SOC, intel and recon tasks...

CVE-2026-5637

creationtimestamp| type| source ---|---|--- 2026-04-06 10:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2suo7fu2g 2026-04-06 11:15:48+00:00| published-proof-of-concept| Telegram/Z9ilPgM8N-vlYjxsXZCfRRqxqCtJw33K7Kit4-JTjgItxjI...

CVE-2026-5612

creationtimestamp| type| source ---|---|--- 2026-04-06 04:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3misevnz7or2d 2026-04-06 05:16:26+00:00| published-proof-of-concept| Telegram/kWexhLh74l4dPPtnd5KMBhXNW8mWfIV9fawO6hseg4Rc4 2026-04-06 06:28:54+00:00| seen|...

CVE-2026-5580

creationtimestamp| type| source ---|---|--- 2026-04-05 19:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirj7ze5bb27...

CVE-2026-35615

creationtimestamp| type| source ---|---|--- 2026-04-05 05:01:37+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-693f-pf34-72c5 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE...

PT-2026-30464

🚨 LIVE HIJACK ALERT — CVE-2026-77777. CVSS 8.9. attacker feeds poisoned task output to CrewAI agent memory. future tasks execute attacker instructions as if they were original goals. investigating. 🧵...

CVE-2026-35492

creationtimestamp| type| source ---|---|--- 2026-04-04 15:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/78769 2026-04-04 21:00:04+00:00| published-proof-of-concept| Telegram/uiceu604qpWHg6nRtttwpOPRlnEzPjnRfn6r5hc8j5w-A...

CVE-2026-34228

creationtimestamp| type| source ---|---|--- 2026-04-04 00:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimx5cnyjg2o 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...

GHSA-XW59-HVM2-8PJ6

creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo...

CVE-2025-43462

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:39+00:00| seen| Telegram/nC1rcVaIKRlluIkCYLEMeSqa4PQwbBPwMLZdSyXRMrqHgM 2026-04-02 22:20:56+00:00| seen| Telegram/Vwk8vKhOFNDS6JM2yCv9XSPx-NaP1qDSk3KCYnu2uDrc7N0...

GHSA-XVWW-XHX6-22PF

creationtimestamp| type| source ---|---|--- 2026-04-02 19:26:54+00:00| seen| Telegram/Wnflj9AVRNFcbzmT8RV9QbE39gd8mxBym86BZleqlS4uOZ8...

CVE-2026-34759 OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...

CVE-2026-34759

Affected software: OneUptime Open Source platform (prior to v10.0.42). Vulnerability: Multiple notification API endpoints were registered without authentication middleware, exposing /notification/ and enabling an unauthenticated attacker to exploit a projectId leak from the public Status Page API...

CVE-2025-39923

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...