CVE-2026-22903

creationtimestamp| type| source ---|---|--- 2026-02-09 08:18:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116039686717106372 2026-02-09 08:26:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefzlumhku22...

CVE-2026-2192

creationtimestamp| type| source ---|---|--- 2026-02-09 00:00:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mef5eikujt2e 2026-02-09 00:01:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/116037730204820286...

CVE-2026-2152

creationtimestamp| type| source ---|---|--- 2026-02-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116035251770655833 2026-02-08 13:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mee25goix22b 2026-02-08 23:43:08+00:00| seen|...

Common Crypto Scams and How to Protect Your Funds in 2026

Crypto scams are surging worldwide, from pig butchering to fake trading platforms and deepfakes, draining victims while fraud teams struggle to keep up...

The Buyer’s Guide to AI Usage Control

Today’s “AI everywhere” reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy contro...

PT-2026-6599

Name of the Vulnerable Software and Affected Versions Moxa Arm-based industrial computers running Moxa Industrial Linux Secure affected versions not specified Description Moxa Arm-based industrial computers running Moxa Industrial Linux Secure utilize a device-unique bootloader password provided ...

Phishing Campaigns Abuse Trusted Cloud Platforms, Raising New Risks for Enterprises

ANY.RUN experts report a surge in phishing campaigns abusing trusted cloud and CDN platforms to bypass security controls and target enterprise users...

Infostealers without borders: macOS, Python stealers, and platform abuse

Infostealer threats are rapidly expanding beyond traditional Windows-focused campaigns, increasingly targeting macOS environments, leveraging cross-platform languages such as Python, and abusing trusted platforms and utilities to silently deliver credential-stealing malware at scale. Since late...

CVE-2026-25487

creationtimestamp| type| source ---|---|--- 2026-02-02 20:59:03+00:00| published-proof-of-concept| https://github.com/craftcms/commerce/security/advisories/GHSA-wqc5-485v-3hqh 2026-03-23 15:20:38+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116279164131270309 2026-03-...

Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms

Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters. The attacks leverage advanced voice phishing aka vishing and bogus...

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID: pnpchphmplpdimbllknjoiopmfphellj, which...

CVE-2025-46316

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory...

GHSA-97MJ-R9V7-258F vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-46316

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, Pages 15.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

CVE-2025-13952

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the...

CVE-2026-22271

creationtimestamp| type| source ---|---|--- 2026-01-23 10:09:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hi2lwph27 2026-01-23 11:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3lfjvosw2j...

Azure Linux 3.0 Security Update: python3 (CVE-2024-3219)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3219 advisory. - The socket module provides a pure-Python fallback to the socket.socketpair function for platforms that don't...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

Exposure Assessment Platforms Signal a Shift in Focus

Gartner® doesn’t create new categories lightly. Generally speaking, a new acronym only emerges when the industry's collective "to-do list" has become mathematically impossible to complete. And so it seems that the introduction of the Exposure Assessment Platforms EAP category is a formal admissio...