Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited for Root Access
An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-20127: Previously Exploited Cisco SD-WAN Flaw
One of eight Cisco SD-WAN vulnerabilities actively exploited in 2026, attributed to APT actor UAT-8616.
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories Ravie LakshmananJun 25, 2026Hacking News / Cybersecurity…
CVE-2026-8932 — Vulnerability brief
CVE-2026-8932 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-50160 — Vulnerability brief
CVE-2026-50160 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR The Hacker NewsJun 25, 2026Artificial Intelligence / Threat Hunting Despite the…
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis Ravie LakshmananJun 25, 2026AI Security / Malware A previously undocumented Rust-based…
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns Ravie LakshmananJun 25, 2026Initial Access Broker / Ransomware A new, stealthy…
CVE-2026-56123 — Critical vulnerability brief
CVSS 9.2socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap…
CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
CVSS 9.3PTC Windchill and FlexPLM Improper Input Validation Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…