CVE-2026-39346

creationtimestamp| type| source ---|---|--- 2026-04-07 20:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwniv3haa2g...

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign

The Russia-linked threat actor known as APT28 aka Forest Blizzard has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of a cyber espionage campaign since at...

CVE-2026-3902

creationtimestamp| type| source ---|---|--- 2026-04-07 16:06:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miw5w2nhm324 2026-04-07 19:33:24+00:00| seen| Telegram/UR5TCX5vufcj9skQtsOGmPNpHO32u3eWlC-vhPXaaDs7Lc...

CVE-2026-5532

creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...

CVE-2026-2480

creationtimestamp| type| source ---|---|--- 2026-04-01 02:29:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifnhfzgb622 2026-04-01 17:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihamhkj432h...

ANT-2026-P2DWB2SK · mastodon · Signature-bypass

signature-bypass high GHSA-chgx-jx3p-rf73 Severity Claude high · Security research firm high · Maintainer unknown Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-P2DWB2SK: LD-Signature bypass via...

CVE-2026-5015

creationtimestamp| type| source ---|---|--- 2026-03-29 00:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5v36dpqi2d...

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks. The strategic positioning activity, which involves implanting and maintaining stealthy access mechanisms within critical environments...

CVE-2026-23388

creationtimestamp| type| source ---|---|--- 2026-03-25 14:27:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvccyiqll2i 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/ 2026-04-24 19:22:23+00:00| seen|...

PT-2026-28078

n8n is an open source workflow automation platform. Prior to versions 2.4.0 and 1.121.0, when LDAP authentication is enabled, n8n automatically linked an LDAP identity to an existing local account if the LDAP email attribute matched the local account's email. An authenticated LDAP user who could...

CVE-2026-33409

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.52 and 9.6.0-alpha.41, an authentication bypass vulnerability allows an attacker to log in as any user who has linked a third-party authentication provider, without knowin...

CVE-2026-33409 Parse Server: Auth provider validation bypass on login via partial authData

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.52 and 9.6.0-alpha.41, an authentication bypass vulnerability allows an attacker to log in as any user who has linked a third-party authentication provider, without knowin...

CVE-2026-33409

Parse Server suffers an authentication bypass on login via partial authData. Affected versions are before 8.6.52 and 9.6.0-alpha.41, where an attacker can log in as a user linked to a third‑party provider if allowExpiredAuthDataToken is true. The attacker only needs the user’s provider ID, gainin...

CVE-2026-33409

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.52 and 9.6.0-alpha.41, an authentication bypass vulnerability allows an attacker to log in as any user who has linked a third-party authentication provider, without knowin...

CVE-2026-33850

creationtimestamp| type| source ---|---|--- 2026-03-24 07:00:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhryto3hvu2l...

Malicious Package

Overview ty-search-suggestion is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @thiagoemmanuell/unhandledrejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7b0d7b4bc457f62d681b55f8cd95c7759ad36fd6565ff2e3e0dd95a0faca97 The package @thiagoemmanuell/unhandledrejection was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-33468

creationtimestamp| type| source ---|---|--- 2026-03-20 17:48:12+00:00| published-proof-of-concept| https://github.com/kysely-org/kysely/security/advisories/GHSA-8cpq-38p9-67gx 2026-03-26 18:49:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhybfccmii22 2026-03-26 22:01:36+00:00|...

CVE-2026-22175

creationtimestamp| type| source ---|---|--- 2026-03-20 07:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhz7ovcr42i...

MAL-2026-1584 Malicious code in wn-idv-persona-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77973c6ca0ba60bf7105d4250b88b0fd7b3304dd3fe9ead1072912d8e724b21f The package wn-idv-persona-client was found to contain malicious code. Source: ossf-package-analysis...