Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Ravie LakshmananJul 02, 2026Malware / Cyber Attack Threat actors associated…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories Ravie LakshmananJul 02, 2026Hacking News / Cybersecurity News This week’s…
CVE-2026-55116 — Critical vulnerability brief
CVSS 9A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in…
CVE-2026-55115 — Critical vulnerability brief
CVSS 9.9A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application…
CVE-2021-29441 — Vulnerability brief
CVE-2021-29441 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2025-64446: FortiWeb Path Traversal Vulnerability
A path traversal vulnerability in FortiWeb exploited via fake PoC repos in the ChocoPoC campaign. Allows attackers to read arbitrary files on…
CVE-2025-14847: MongoBleed Vulnerability
A vulnerability in MongoDB, exploited via fake PoC repos in the ChocoPoC campaign.
CVE-2024-49113 — Vulnerability brief
CVE-2024-49113 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2025-11371: Gladinet Triofox Critical Vulnerability
A critical flaw (CVSS 9.1) in Gladinet Triofox exploited by Storm-2603 for initial access in ransomware attacks. Used to probe for local…
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity remote code execution vulnerability, CVE-2026-45659 (CVSS 8.8), affecting Microsoft SharePoint…