Active Exploitation: Max-Severity Adobe ColdFusion RCE Vulnerability (CVE-2026-48282) Targeted in the Wild
Executive Summary
A critical, maximum-severity remote code execution (RCE) vulnerability in Adobe ColdFusion is being actively exploited in the wild by threat actors to compro...
Massive Breach: Japanese Telecom Giant KDDI Leaks 12 Million Emails and 7 Million Passwords
Executive Summary
Japanese telecommunications giant KDDI Corp. has submitted an official cyberattack report to the Japanese Communications Ministry confirming a massive, highly critical data...
Januscape: 16-Year-Old Linux KVM Hypervisor Escape Flaw Disclosed (CVE-2026-53359)
Executive Summary
A ground-breaking guest-to-host hypervisor escape vulnerability has been disclosed in the Linux Kernel-based Virtual Machine (KVM), exposing virtualized environments to host-level c...
Data Security Breach: T.A. Solberg Data Leak Exposes SSNs and Protected Health Records
Executive Summary
Wisconsin-based holding giant T.A. Solberg Co. Inc. (headquartered in Minocqua, WI) has disclosed a major data breach following a successful cyber intrusion into its corporate n...
Regional Espionage: China-Linked APT Expands Attacks on Southeast Asian Critical Infrastructure
Executive Summary
A prominent China-linked advanced persistent threat (APT) group has significantly expanded its cyber espionage and intrusion operations across Southeast Asia. The campa...
Ubiquiti has issued an urgent security advisory warning of a maximum-severity vulnerability in its UniFi Connect enterprise device management application. Tracked as CVE-2026-38491 (CVSS score 9.8 / Critical), the flaw allows unauthenticated remote attackers on adjac...
Executive Summary: A critical series of unpatched vulnerabilities has been disclosed in FatFs, an extremely popular open-source filesystem library bundled into the firmware of millions of embedded and Internet of Things (IoT) devices worldwide. Disclo...
Featured Snippet: A critical zero-day vulnerability (CVE-2026-20245) in the Cisco Catalyst SD-WAN Manager is actively being exploited by threat actors to gain root-level access. Security teams must immediately apply Cisco's official patches an...
What is the FortiBleed leak? The FortiBleed leak is a critical cybersecurity incident exposing over 86,000 cleartext administrator credentials for Fortinet FortiGate firewalls and VPN gateways. Discovered by security researchers, this m...
Featured Summary: A critical remote code execution (RCE) vulnerability has been disclosed affecting Nuance PowerScribe, a widely deployed radiology reporting and clinical dictation platform used across major healt...
Featured Summary: A critical remote code execution (RCE) vulnerability has been disclosed affecting Nuance PowerScribe, a widely deployed radiology reporting and clinical dictation platform used across major healt...
What is the JadePuffer Langflow RCE attack? The JadePuffer cyberattack is a sophisticated ransomware campaign where threat actors exploited a missing authentication vulnerability (CVE-2025-3248)...