[updated] A fake cloud storage alert that ends at Freecash

Last week we talked about an app that promises users they can make money testing games, or even just by scrolling through TikTok. Imagine our surprise when we ended up on a site promoting that same Freecash app while investigating a “cloud storage” phish. We’ve all probably seen one of those...

CVE-2025-8589

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Reflected XSS. This issue affects SKSPro: through 07012026...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to January 2026 CPU

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in January 2026. These issues are addressed by WebSphere Application Server shipped with WebSphere...

Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers January 2026

Summary In addition to updating many operating system level packages, IBM Business Automation Workflow container fixes address the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-47912 DESCRIPTION: The Parse function permits values other than IPv6 addresses to be included in squar...

CVE-2026-22277

creationtimestamp| type| source ---|---|--- 2026-01-30 09:10:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115983268882462022 2026-01-30 09:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmy7l4uug2c 2026-01-30 10:00:32+00:00| seen|...

CVE-2025-62514

creationtimestamp| type| source ---|---|--- 2026-01-29 17:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlb7gxhgh2r 2026-01-29 17:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdldpnoew42i...

PT-2026-5349

In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-5350

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0007 Description A flaw exists in the writeToParcel function within WindowInfo.cpp that could allow an attacker to trick a user into granting permissions through a tapjacking or overlay attack. This could result in local...

CVE-2025-69071

creationtimestamp| type| source ---|---|--- 2026-01-28 23:25:14+00:00| seen| Telegram/uuSlRLHMTPdGOFBeGeajfdGl4dndnQq6XjOCBo23ijfHfg...

CVE-2025-57792

creationtimestamp| type| source ---|---|--- 2026-01-28 19:48:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj24exqzj2x 2026-01-28 19:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdj2l6ujb72t...

CVE-2025-40553

creationtimestamp| type| source ---|---|--- 2026-01-28 10:09:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhzr4zsua2r 2026-01-28 10:15:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi24e3bsr2x 2026-01-28 13:21:55+00:00| seen|...

CVE-2025-69043

creationtimestamp| type| source ---|---|--- 2026-01-27 23:30:22+00:00| seen| Telegram/TRIf-qFMud8bc2hSsixwYtPQsp3y1pwQn1vbtgHRyBZM...

CVE-2025-68883

creationtimestamp| type| source ---|---|--- 2026-01-27 23:29:14+00:00| seen| Telegram/-bGFeUnXd3wpSfC7SViVpgMiu9utMM47a2xPyUysuC9P-EU...

Microsoft announces the 2026 Security Excellence Awards winners

In today’s fast‑moving digital arena, security isn’t a solo act—it’s a team sport. Every day, defenders across the globe suit up, strategize, and work shoulder‑to‑shoulder to protect organizations and communities from an ever‑evolving field of cyberthreats. That shared spirit of collaboration is...

CVE-2020-2780

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CVE-2021-2007

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

About Remote Code Execution – Microsoft Office (CVE-2026-21509) vulnerability

About Remote Code Execution - Microsoft Office CVE-2026-21509 vulnerability. The vulnerability was urgently fixed on January 26, outside the regular Microsoft Patch Tuesday. Microsoft classified it as a Security Feature Bypass, but in fact, it is more of a Remote Code Execution. The vulnerability...

CVE-2026-1361

creationtimestamp| type| source ---|---|--- 2026-01-27 04:27:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdew7atfsn2h 2026-01-27 05:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdez3nkrse2g 2026-02-17 11:00:00+00:00| seen|...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the January 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

Imperva Customers Protected Against CVE-2026-21962 in Oracle HTTP and WebLogic

What Is CVE-2026-21962? CVE-2026-21962 is a critical CVSS 10.0 vulnerability in the Oracle HTTP Server and the WebLogic Server Proxy Plug-in for Apache HTTP Server and Microsoft IIS. An unauthenticated attacker with HTTP access can exploit this flaw by sending crafted requests to the affected pro...