CVE-2026-50628

creationtimestamp| type| source ---|---|--- 2026-06-11 18:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzt3n3bgh2t 2026-06-15 18:10:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o...

A tale of two eras

Welcome to this week's edition of the Threat Source newsletter. To the surprise of absolutely no one who has seen my face, I'm one of the younger employees at Talos. As my industry veteran colleagues were buying the first iPods, navigating the switch from dial-up to broadband, saying goodbye to...

CVE-2026-12029

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrlmr5g2p 2026-06-12 05:25:16+00:00|...

CVE-2026-12031

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 04:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2u4ktdqu2y 2026-06-12 05:14:42+00:00|...

CVE-2026-12028

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrduutc2y 2026-06-12 05:41:40+00:00|...

CVE-2026-12034

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2u4s2lj52p 2026-06-12 06:01:41+00:00|...

CVE-2026-50627

creationtimestamp| type| source ---|---|--- 2026-06-11 17:59:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzsjocwhy2t 2026-06-15 18:10:38+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22...

CVE-2026-50631

creationtimestamp| type| source ---|---|--- 2026-06-11 17:45:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrq2n2dz2f...

CVE-2026-50629

creationtimestamp| type| source ---|---|--- 2026-06-11 17:41:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrjdlhjm25...

CVE-2026-50630

creationtimestamp| type| source ---|---|--- 2026-06-11 17:38:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrdeb7n62w...

CVE-2026-53661

creationtimestamp| type| source ---|---|--- 2026-06-11 17:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzr2bnmce25...

CVE-2026-50623

creationtimestamp| type| source ---|---|--- 2026-06-11 17:20:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzqep6lp32e 2026-06-15 10:56:16+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mod4qikzm724...

CVE-2026-49875

creationtimestamp| type| source ---|---|--- 2026-06-11 17:15:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzq3qks772t 2026-06-15 16:40:32+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpy476mu2v...

CVE-2026-7787

creationtimestamp| type| source ---|---|--- 2026-06-11 17:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzpa7kxjz25...

CVE-2026-27022

creationtimestamp| type| source ---|---|--- 2026-06-11 16:10:14+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u...

CVE-2026-11816

creationtimestamp| type| source ---|---|--- 2026-06-11 15:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzijwsfgq25 2026-06-11 17:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzrmcbbgp25...

CVE-2026-7787

CVE-2026-7787 affects Langflow OSS versions 1.0.0–1.9.1. A session ID namespace bypass in the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows unauthenticated attackers to read or modify chat history by overriding the session_id used during flow execution when a PUBLIC flow includes a...

CVE-2026-48998

creationtimestamp| type| source ---|---|--- 2026-06-11 14:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgxuuio72w...

CVE-2026-49214

creationtimestamp| type| source ---|---|--- 2026-06-11 14:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgowdf7j24...

Malicious code in fed-callnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3971b7c0ac52c7cb668a8147d9774cb0f7a0b4e0bf04a59a6b55426f9c84fcf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...