ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 8h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 9h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilities in Slican telephone exchanges · 10h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 14h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 8h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 9h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilities in Slican telephone exchanges · 10h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 14h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h
🛡️
ACyber Sentinel Security Assessment Team

Latest Intelligence — Page 18 of 24

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploite...

📰 The Hacker News 🕐 Sep 27
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as...

📰 The Hacker News 🕐 Sep 26
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally....

📰 The Hacker News 🕐 Sep 26
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its ...

📰 The Hacker News 🕐 Sep 26
CVE-2026-87902: Critical Vulnerability in WordPress

CVE-2026-87902: Critical Vulnerability in WordPress

vulnerability CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks. Editorial Team Sept...

📰 Kaspersky 🕐 Sep 25
Roundcube Webmail SQL Injection-lek misbruikt bij aanvallen

Roundcube Webmail SQL Injection-lek misbruikt bij aanvallen

Een SQL Injection-kwetsbaarheid in Roundcube wordt misbruikt bij aanvallen. Dat laat het Canadese Centrum voor Cybersecurity weten. Roundcube is opensource-webm...

📰 security.nl 🕐 Sep 25
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability ...

📰 The Hacker News 🕐 Sep 25
NCSC meldt actief misbruik van kritiek WordPress-lek: 'Update nu'

NCSC meldt actief misbruik van kritiek WordPress-lek: 'Update nu'

Aanvallers maken actief misbruik van een kritieke path traversal-kwetsbaarheid in WordPress waardoor websites zijn over te nemen, zo meldt het Nationaal Cyber S...

📰 security.nl 🕐 Sep 25
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento t...

📰 The Hacker News 🕐 Sep 25