PT-2026-48751

25 plugins/themes with vulnerabilities disclosed today and no patch available. Uninstall and remove them immediately if they haven’t been updated. Deactivating is not enough. Those who have the free Wordfence plugin will only receive protection in 30 days. You are on your own. Plugin Name | CVE-I...

CVE-2026-10523

creationtimestamp| type| source ---|---|--- 2026-06-09 08:30:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-567 2026-06-09 17:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnupbjfggb2x 2026-06-09 17:28:39+00:00| seen|...

CVE-2025-14771

creationtimestamp| type| source ---|---|--- 2026-06-03 06:01:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-545 2026-06-03 11:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mneyz2dgnr2o 2026-06-03 14:01:41+00:00| seen|...

CVE-2026-22721

creationtimestamp| type| source ---|---|--- 2026-02-24 17:42:38+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-162 2026-02-27 01:02:20+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mfsj6uh6vs23 2026-03-01 00:05:24+00:00| seen|...

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk WHD instances to obtain initial access and move laterally across the organization's network to other high-value assets. That said, the Microsoft...

EUVD-2025-138550

Malicious code in polymer-afavof-aff npm...

PT-2025-37083

Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack affected versions not specified Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low. Recommendations: At the moment, the...

CVE-2024-32589

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodq2vj42o...

CVE-2024-34779

creationtimestamp| type| source ---|---|--- 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1369 2024-09-12 04:44:40+00:00| seen| https://t.me/cvedetector/5422...

CVE-2023-33157

creationtimestamp| type| source ---|---|--- 2023-07-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1062 2023-08-23 15:04:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8897...

CVE-2023-1634

creationtimestamp| type| source ---|---|--- 2023-03-25 21:38:29+00:00| seen| https://t.me/cibsecurity/60749...

FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

The U.S. Federal Bureau of Investigation FBI on Saturday confirmed unidentified threat actors have breached one of its email servers to blast hoax messages about a fake "sophisticated chain attack." The incident, which was first publicly disclosed by threat intelligence non-profit SpamHaus,...

Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution

A global spear-phishing campaign has been targeting organizations associated with the distribution of COVID-19 vaccines since September 2020, according to new research. Attributing the operation to a nation-state actor, IBM Security X-Force researchers said the attacks took aim at the vaccine col...

US-CERT Technical Cyber Security Alert TA09-020A -- Microsoft Windows Does Not Disable AutoRun Properly

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-020A Microsoft Windows Does Not Disable AutoRun Properly Original release date: January 20, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Overview Disabling...

US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...