Cybersecurity
Analysis, perspectives, and current intelligence on cybersecurity, emerging threats, risk, and the technologies shaping modern security.
Exclusive IPHWY ThreatFeed
A custom-maintained, machine-readable feed of IP addresses associated with malicious activity, combining curated blacklist intelligence with additional indicators validated through AbuseIPDB.
Latest CISA Alerts
CISA Adds Six Known Exploited Vulnerabilities to Catalog
by CISA on October 20, 2026 at 12:00 pm
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) […]
CISA Adds Two Known Exploited Vulnerabilities to Catalog
by CISA on October 16, 2026 at 12:00 pm
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose […]
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
by CISA on October 16, 2026 at 12:00 pm
CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing persistence, […]
CISA Adds One Known Exploited Vulnerability to Catalog
by CISA on October 15, 2026 at 12:00 pm
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding […]
CISA Adds Four Known Exploited Vulnerabilities to Catalog
by CISA on October 14, 2026 at 12:00 pm
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105134 Ahsay AhsayCBS Command […]
CISA Adds Two Known Exploited Vulnerabilities to Catalog
by CISA on October 13, 2026 at 12:00 pm
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant […]
—–> View All CISA Alerts <—–
Latest CVEs
CVE-2026-82814
CVSS 3.1: 8.8 · HighThe Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() during migration. This allows unauthenticated…
CVE-2026-113744
CVSS 4.0: 9.3 · CriticalA security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer…
CVE-2026-113743
CVSS 4.0: 2.1 · LowA weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The…
CVE-2026-114198
CVSS 4.0: 8.7 · HighDeserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility
CVE-2026-114197
CVSS 4.0: 8.7 · HighDeserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility
CVE-2026-114119
CVSS 4.0: 9.3 · CriticalBest Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can…
Source: NIST National Vulnerability Database. Latest published records available from NVD; severity may be pending. Retrieved Oct 21, 2026, 02:19 UTC.
-----> View More CVEs <-----
Cybersecurity News & Threat Intelligence
Current headlines from The Hacker News. External links open in a new tab.
Security Tools & Resources
A curated collection of trusted tools, references, and learning resources for assessing risk, strengthening defenses, and responding to threats.
