Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets Ravie LakshmananAug 31, 2026Artificial Intelligence / Ransomware Threat actors associated with…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs Swati KhandelwalAug 31, 2026Cyber Espionage / Network Security A…
CVE-2019-11510 — Vulnerability brief
CVE-2019-11510 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims Ravie LakshmananAug 31, 2026Cyber Espionage / IoT Botnet The U.S.…
CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability
CVSS 9.4PaperCut NG/MF Unsafe Reflection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor Ravie LakshmananAug 30, 2026Social Engineering / Malware Microsoft has disclosed details of a…
CVE-2026-15369 — Critical vulnerability brief
CVSS 9.8The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3.…
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE Ravie LakshmananAug 29, 2026Vulnerability / Web Security Multiple critical security…
CVE-2026-76581 — Vulnerability brief
CVE-2026-76581 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…