Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007522 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: fix ltout double free on completion race Always remove linked timeout on iolinktimeoutfn...

CVE-2025-68109

creationtimestamp| type| source ---|---|--- 2026-04-16 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mjncncgazj2p 2026-09-08 06:49:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/churchcrmdbrestorerce.rb...

ffensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

ofensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

CVE-2026-6132

creationtimestamp| type| source ---|---|--- 2026-04-13 00:00:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjdkpq6uf32b 2026-04-13 00:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdkpu4olb24 2026-04-13 00:00:34+00:00| seen|...

MAL-2026-2560 Malicious code in @b2b-portal/uch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89eb419e1f7beb102007973e2d226cb2cb5f534096cbc2be8dc538324f3f19db The package @b2b-portal/uch was found to contain malicious code. Source: ghsa-malware e559f0d2d934ad98bda8c11ca6613644ecf3f2584bee7e75c7edf59ecda35d3...

CVE-2026-5226

creationtimestamp| type| source ---|---|--- 2026-04-11 02:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rbqz2cv23 2026-04-19 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjv4hdt2ad2h...

CVE-2026-35480

go-ipld-prime is an implementation of the InterPlanetary Linked Data IPLD spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.22.0, the DAG-CBOR decoder uses collection sizes declared in CBOR headers a...

CVE-2026-5811

creationtimestamp| type| source ---|---|--- 2026-04-09 00:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizle4bqyj2d...

CVE-2026-32540

creationtimestamp| type| source ---|---|--- 2026-04-08 13:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miyfmzazry2h...

Timeshare owners warned to watch out for cartel-linked scams

If you own a timeshare and have been searching for a way out, you need to know who may be targeting you. In February, the US Treasury Department announced sanctions against a timeshare fraud network linked to a major Mexican drug cartel, the Jalisco New Generation Cartel CJNG. These aren’t your...

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Iran-affiliated cyber actors are targeting internet-facing operational technology OT devices across critical infrastructures in the U.S., including programmable logic controllers PLCs, cybersecurity and intelligence agencies warned Tuesday. "These attacks have led to diminished PLC functionality,...

CVE-2026-39346

creationtimestamp| type| source ---|---|--- 2026-04-07 20:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwniv3haa2g...

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign

The Russia-linked threat actor known as APT28 aka Forest Blizzard has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of a cyber espionage campaign since at...

CVE-2026-3902

creationtimestamp| type| source ---|---|--- 2026-04-07 16:06:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miw5w2nhm324 2026-04-07 19:33:24+00:00| seen| Telegram/UR5TCX5vufcj9skQtsOGmPNpHO32u3eWlC-vhPXaaDs7Lc...

PT-2026-51986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter verifier regarding linked register delta tracking. When the source register src reg and destination register dst reg are pointers to the...

CVE-2026-5532

creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...

CVE-2026-2480

creationtimestamp| type| source ---|---|--- 2026-04-01 02:29:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifnhfzgb622 2026-04-01 17:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihamhkj432h...

CVE-2026-5015

creationtimestamp| type| source ---|---|--- 2026-03-29 00:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5v36dpqi2d...

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks. The strategic positioning activity, which involves implanting and maintaining stealthy access mechanisms within critical environments...