Edge of Disaster: MikroTik RouterOS Pre-Auth Integer Underflow (CVE-2026-84411) Grants Root Remote Code Execution
Published on DigitalSpying.com | October 5, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Critical Network Infrastructure | Pre-Authentic...
Date: October 4, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Linux Security / Privilege Escalation / Vulnerability Management / Cloud Infrastructure
Tags: Red Hat, Red Hat Satellite, Foreman, RHEL, Linux, Sandbox Escape, RCE, CVE-2026-96658, Sec...
Healthcare Code Red: Medical Records Giant Epic Halts Product Development Over Silent MyChart Vulnerabilities
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Critical Healthcare Infrastructure | Silent Data Ex...
Date: October 4, 2026 | Author: Threat Research & Intelligence Team, Digital Spying
Category: Enterprise Security / Messaging Infrastructure / Microsoft Exchange / Vulnerability Research
Tags: Microsoft Exchange, CVE-2026-96940, Elevation of Privilege, Authorization Bypass, On-Premi...
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: National Security Data Breach | Federal Personneel Espionage | Extended Dwell Time
|---|
When the federal government mandates a...
Date: October 4, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Enterprise Security / Privileged Access Management / Vulnerability Management / Access Control
Tags: Fortra, BoKS, PAM, Privileged Access Management, RCE, Command Injection, CVE-2026-7...
Prompt to Shell: Critical GitLab AI Gateway RCE (CVE-2026-90970) Enables Host Takeover in Self-Hosted DevSecOps
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: AI Infrastructure Vulnerability | Remote Code Exe...
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Financial Infrastructurre Compromise | Zero-Day Supply Chain Exploitation | State-Sponsored Cyber Heist
|---|
The cryptocurrenc...
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Mobile Zero-Click Vulnerability | Memory Corruption | Mercenary Spyware Vector
|---|
Zero-click vulnerabilities represent the p...
Date: October 4, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Zero-Day Exploitation / Mobile Security / Memory Corruption / Reverse Engineering / Spyware
Tags: Apple, iOS, macOS, CoreGraphics, CVE-2026-86950, Zero-Click, TrueType Font, Glyph Proc...
Published on DigitalSpying.com | October 4, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Critical Infrastructure Cyberattack | Hybrid APT-Ransomware | EDR Neutralizatio
n
The boundary between state-sponsored cyber es...
Date: October 4, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Threat Intelligence / Ransomware / Critical Infrastructure / State-Sponsored APT
Tags: Warlock, Storm-2603, Longlegs, Gold Salem, China, SharePoint, Ransomware, Critical Infrastructure...