ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms Ravie LakshmananOct 08, 2026Agentic AI / Web Security…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia The Hacker NewsOct 08, 2026Web Security / Threat Intelligence…
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Ravie LakshmananOct 08, 2026Browser Security / Malware Cybersecurity…
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data Ravie LakshmananOct 08, 2026Cybercrime / Ransomware The U.S.…
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks Swati KhandelwalOct 08, 2026Cybercrime / Cyber Espionage…
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm Ravie LakshmananOct 08, 2026Artificial Intelligence / Cloud Security The npm package known as…
CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
ISC BIND Data Processing Errors Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
CVE-2016-3081 — Apache Struts Command Injection Vulnerability
Apache Struts Command Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2023-22894 — Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi Cleartext Storage of Sensitive Information Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
CVE-2021-3199 — ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE Docs Server Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…