2026-07-27 14:40 UTC[high]Public Exploit Released for Patched vBulletin Pre-Auth Code Execution FlawThe Hacker News
2026-07-27 14:10 UTC[info]⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and MoreThe Hacker Newsai
2026-07-27 13:05 UTC[info]n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n ProcessThe Hacker NewsCVE-2026-27577cve
2026-07-27 12:37 UTC[low]Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams UpdateThe Hacker Newsphishingwindows
2026-07-27 12:00 UTC[med]CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA AdvisoriesCVE-2025-68686CVE-2026-16812cloudcvecisa
2026-07-27 10:51 UTC[low]Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows MalwareThe Hacker Newsphishingmalwarewindows
2026-07-27 10:04 UTC[info]Java Spring Boot "heapdump" scans, (Mon, Jul 27th)SANS Internet Storm Center
2026-07-27 08:48 UTC[info]TELESHIM Abuses Telegram for C2 in Attacks Against Middle East GovernmentsThe Hacker Newsmalware
2026-07-27 08:01 UTC[info]GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package AdoptionThe Hacker Newswindows
2026-07-27 02:00 UTC[info]ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)SANS Internet Storm Center
2026-07-26 15:26 UTC[med]Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)SANS Internet Storm Center
2026-07-25 18:48 UTC[info]Malvertising Sends Malware in Pieces, Then Makes the Browser Build the ExecutableThe Hacker Newsmalwarewindows
2026-07-25 12:52 UTC[high]Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched AvailableThe Hacker NewsCVE-2026-16723rcecve
2026-07-25 10:30 UTC[low]The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for DaysWired Security
2026-07-25 10:14 UTC[high]Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as GitThe Hacker Newsrce
2026-07-25 10:14 UTC[low]CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account HijackingThe Hacker Newsphishing
2026-07-25 10:14 UTC[high]Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCEThe Hacker Newsransomwarerce
2026-07-25 09:53 UTC[high]DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate PayoutsThe Hacker Newsransomware