critical
54
high
46
medium
0
low
0
New CRITICAL Threat: SharePoint ToolShell Ransomware Campaign
A campaign by the threat group Storm-2603 that exploits SharePoint ToolShell flaws to plant a fileless backdoor, subsequently used to launch Warlock ransomware attacks.
New CRITICAL Threat: Node-RED Exploitation (CVE-2026-58115)
A max-severity vulnerability in Node-RED being actively exploited to gain unauthenticated access, run arbitrary commands, and deploy Linux malware and webshells in operational technology (OT) environments.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed out-of-bounds read vulnerability in OpenSSH that allows attackers to sign in to accounts that have no password set and potentially execute code over a network.
New CRITICAL Threat: WordPress Core TOCTOU Race Condition (CVE-2026-119977)
A Time-of-check Time-of-use (TOCTOU) race condition vulnerability in WordPress Core that has been confirmed as actively exploited in the wild and added to the CISA KEV catalog.
New CRITICAL Threat: Node-RED Critical Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED being exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware and webshells.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A security flaw in OpenSSH that allows unauthorized sign-ins to accounts that do not have a password set, which attackers are actively attempting to exploit.
New CRITICAL Threat: SharePoint ToolShell Ransomware Attack
The threat group Storm-2603 is exploiting vulnerabilities in SharePoint ToolShell to plant fileless backdoors, which are then used to launch Warlock ransomware attacks across corporate networks.
New CRITICAL Threat: Node-RED Exploitation Campaign (CVE-2026-58115)
Attackers are actively exploiting a critical vulnerability in Node-RED to gain unauthenticated access, deploy malicious flows, and install Linux malware and webshells on internet-exposed operational technology (OT) systems.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed out-of-bounds read vulnerability in OpenSSH that allows attackers to gain unauthorized access to accounts that do not have a password set, potentially leading to remote code execution.
New HIGH Threat: CryptoPayment Gateway WordPress Plugin Flaw
An unpatched vulnerability in the CryptoPayment Gateway WordPress plugin is being actively exploited by attackers to delete files and extract sensitive wallet credentials without requiring authentication.
New CRITICAL Threat: SharePoint ToolShell Ransomware Campaign
The threat group Storm-2603 is exploiting vulnerabilities in SharePoint ToolShell to plant fileless backdoors, which are then used to facilitate the deployment of Warlock ransomware across corporate networks.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
Attackers are actively exploiting this flaw in Node-RED servers to gain unauthenticated access, execute arbitrary commands, and deploy Linux malware and webshells within operational technology (OT) environments.
New HIGH Threat: WordPress Core TOCTOU Race Condition
CISA has confirmed active exploitation of a Time-of-check Time-of-use (TOCTOU) race condition vulnerability in WordPress Core, tracked as CVE-2026-119977.
New CRITICAL Threat: Node-RED Server Malware Campaign
Attackers are exploiting a critical vulnerability (CVE-2026-58115) in Node-RED servers to gain unauthenticated access, deploy malicious flows, and execute Linux-based malware and webshells.
New CRITICAL Threat: SharePoint ToolShell Exploitation
The China-linked threat group Storm-2603 is actively exploiting flaws in the SharePoint ToolShell to plant fileless backdoors on target networks, which are subsequently used to launch ransomware attacks.
New CRITICAL Threat: SharePoint ToolShell Ransomware Campaign
The threat group Storm-2603 is exploiting flaws in SharePoint ToolShell to plant fileless backdoors, which are then used to deploy Warlock ransomware across corporate networks.
New CRITICAL Threat: Industrial Refrigeration and Cold Chain System Attacks
Malicious cyber activity targeting internet-connected industrial refrigeration and cold chain monitoring systems globally, which can lead to operational disruption in healthcare and food supply sectors.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed out-of-bounds read vulnerability in OpenSSH that allows attackers to gain unauthorized access to accounts without passwords and potentially execute code over a network.
New HIGH Threat: CVE-2026-123158 (SSHole)
A security flaw in OpenSSH that enables unauthorized sign-ins to accounts that do not have a password set, allowing potential root access.
New CRITICAL Threat: CVE-2026-58115 (Node-RED RCE)
A max-severity vulnerability in Node-RED being exploited to gain unauthenticated access, execute commands, and deploy Linux malware and webshells in industrial and OT environments.
New HIGH Threat: CVE-2026-119977 (WordPress Core RCE)
A Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unprivileged remote attackers to execute code on the server.
New HIGH Threat: SkyW4lker Phishing Kit
An active phishing kit targeting Microsoft 365 accounts that leverages legitimate device-code authentication to compromise corporate accounts without requiring password theft or MFA bypass.
New CRITICAL Threat: CVE-2026-58115 (Node-RED RCE)
A max-severity vulnerability in Node-RED being exploited to gain unauthenticated access, execute commands, and deploy Linux malware and webshells in operational technology environments.
New HIGH Threat: CVE-2026-119977 (WordPress Core RCE)
A Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unprivileged remote attackers to execute code on the server.
New HIGH Threat: OpenSSH 'SSHole' Flaw (CVE-2026-123158)
A recently disclosed security flaw in OpenSSH, codenamed SSHole, allows attackers to sign in to accounts that do not have a password set, potentially leading to unauthorized root access.
New HIGH Threat: WordPress Core RCE (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on affected servers.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware, including bots and webshells, within operational technology environments.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed security flaw in OpenSSH, codenamed SSHole, allows attackers to gain unauthorized access to accounts that do not have a password set, enabling potential root access.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed security flaw in OpenSSH, codenamed SSHole, allows attackers to gain unauthorized access to accounts that do not have a password set, enabling potential root access.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed security flaw in OpenSSH, codenamed SSHole, allows attackers to gain unauthorized access to accounts that do not have a password set, potentially leading to root-level compromise.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New CRITICAL Threat: SharePoint ToolShell Ransomware Campaign
The threat group Storm-2603 is exploiting vulnerabilities in SharePoint ToolShell to plant fileless backdoors on networks, which are subsequently used to launch Warlock ransomware attacks.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including botnets and webshells, within operational technology environments.
New CRITICAL Threat: SharePoint ToolShell Ransomware Campaign
The threat group Storm-2603 is exploiting vulnerabilities in SharePoint ToolShell to plant fileless backdoors on networks, which are subsequently used to launch Warlock ransomware attacks.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on affected servers.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New HIGH Threat: SharePoint ToolShell Backdoor
The threat group Storm-2603 is exploiting flaws in SharePoint ToolShell to plant fileless backdoors on compromised networks, which are subsequently used to facilitate ransomware attacks.
New HIGH Threat: WordPress Core RCE (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild to allow remote, unprivileged attackers to execute code on affected servers.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware within operational technology (OT) environments.
New CRITICAL Threat: Node-RED OT Malware Campaign
Attackers are exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to gain unauthenticated access to operational technology (OT) environments, where they deploy Linux bots and webshells.
New HIGH Threat: WordPress Core RCE (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress core allows unauthenticated attackers to achieve remote code execution during the site's core upgrade process.
New CRITICAL Threat: Zyxel GS1900 Series Zero-Day
A critical zero-day vulnerability (CVE-2026-107441) in Zyxel GS1900 network switches allows unauthenticated attackers to execute commands with root privileges via the web management interface.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A recently disclosed security flaw in OpenSSH, codenamed SSHole, allows attackers to gain unauthorized access to accounts that do not have a password set, potentially leading to root-level compromise.
New HIGH Threat: WordPress Core Vulnerability (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress Core is being actively exploited in the wild, allowing unprivileged remote attackers to execute code on affected servers.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New CRITICAL Threat: Node-RED Malware Campaign (CVE-2026-58115)
Attackers are exploiting a maximum-severity vulnerability in Node-RED to execute commands on exposed systems and deploy Linux malware, including botnets and webshells, within operational technology environments.
New CRITICAL Threat: Zyxel GS1900 Zero-Day (CVE-2026-107441)
A zero-day vulnerability in Zyxel GS1900 Series network switches that allows unauthenticated attackers to execute commands with root privileges through the web management interface.
New HIGH Threat: SSHole (CVE-2026-123158)
A critical authentication bypass vulnerability in OpenSSH on musl-based Linux systems that allows attackers to authenticate to accounts configured to reject password-based logins by submitting an oversized password.
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
An out-of-bounds read vulnerability in OpenSSH, codenamed SSHole, is being targeted by threat actors to gain unauthorized access to accounts that do not have a password set.
New HIGH Threat: WordPress Core RCE (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild to allow unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware, including bots and webshells, within operational technology environments.
New CRITICAL Threat: Ransomware Operations (General)
Multiple ransomware groups, including N0N and Akira, remain highly active, with 20 organizations listed on leak sites within the last 24 hours, indicating ongoing successful exfiltration and encryption campaigns.
New HIGH Threat: WordPress Core TOCTOU Race Condition (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild, allowing remote, unprivileged attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware and webshells within operational technology (OT) environments.
New HIGH Threat: CVE-2026-123158 (SSHole)
An out-of-bounds read vulnerability in OpenSSH that can enable unauthorized sign-ins to accounts that have no password set, potentially allowing remote code execution.
New CRITICAL Threat: CVE-2026-58115 (Node-RED RCE)
A vulnerability in Node-RED being exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware and webshells in operational technology environments.
New HIGH Threat: CVE-2026-119977 (WordPress Core RCE)
A Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unprivileged remote attackers to execute code on the server.
New HIGH Threat: CVE-2026-123158 (SSHole)
An out-of-bounds read vulnerability in OpenSSH that can enable unauthorized sign-ins to accounts that have no password set, potentially allowing remote code execution.
New CRITICAL Threat: CVE-2026-58115 (Node-RED RCE)
A vulnerability in Node-RED being exploited to gain unauthenticated access, execute commands on exposed systems, and deploy Linux malware and webshells in operational technology environments.
New HIGH Threat: CVE-2026-119977 (WordPress Core RCE)
A Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unprivileged remote attackers to execute code on the server.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New CRITICAL Threat: BTCPay Server Credential Exposure (CVE-2026-119757)
An information disclosure vulnerability in BTCPay Server that allows unauthenticated remote attackers to retrieve sensitive .macaroon credential files for Lightning Network Daemon (LND) nodes.
New CRITICAL Threat: Node-RED Operational Technology Malware Campaign
Attackers are exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to gain unauthenticated access, execute commands, and deploy Linux bots and webshells in industrial environments.
New HIGH Threat: WordPress Core TOCTOU Vulnerability (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New HIGH Threat: OpenSSH 'SSHole' Vulnerability (CVE-2026-123158)
A security flaw in OpenSSH, codenamed 'SSHole', allows attackers to sign in to accounts that do not have a password set, potentially granting root access.
New CRITICAL Threat: WordPress Core TOCTOU Race Condition (CVE-2026-119977)
A Time-of-check Time-of-use (TOCTOU) race condition vulnerability in WordPress Core has been confirmed by CISA as being actively exploited in the wild.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, particularly within operational technology environments.
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: WordPress Core TOCTOU Vulnerability (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Malware Campaign
Attackers are actively exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to execute commands on exposed systems and deploy Linux bots and webshells.
New CRITICAL Threat: OpenSSH 'SSHole' Vulnerability
A recently disclosed security flaw in OpenSSH that allows unauthorized sign-ins to accounts that do not have a password set, enabling potential root access.
New CRITICAL Threat: OpenSSH 'SSHole' Flaw
A critical security flaw in OpenSSH allows attackers to gain unauthorized access to accounts that do not have a password set, enabling potential root access and system compromise.
New HIGH Threat: WordPress Core Race Condition (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild to allow unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New CRITICAL Threat: BTCPay Server Credential Exposure (CVE-2026-119757)
An information disclosure vulnerability in BTCPay Server that allows unauthenticated remote attackers to retrieve sensitive .macaroon credential files for Lightning Network Daemon (LND) nodes.
New CRITICAL Threat: Node-RED OT Malware Campaign (CVE-2026-58115)
A max-severity vulnerability in Node-RED being actively exploited to gain unauthenticated access, execute commands, and deploy Linux malware and webshells in operational technology environments.
New HIGH Threat: WordPress Core RCE (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New HIGH Threat: WordPress Core TOCTOU Vulnerability (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Malware Campaign
Attackers are actively exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to execute commands on exposed systems and deploy Linux bots and webshells.
New CRITICAL Threat: OpenSSH 'SSHole' Vulnerability
A recently disclosed security flaw in OpenSSH that allows unauthorized sign-ins to accounts that do not have a password set, enabling potential root access.
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: WordPress Core TOCTOU Vulnerability (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Malware Campaign
Attackers are actively exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to execute commands on exposed systems and deploy Linux bots and webshells.
New CRITICAL Threat: OpenSSH 'SSHole' Vulnerability
A recently disclosed security flaw in OpenSSH that allows unauthorized sign-ins to accounts that do not have a password set, enabling potential root access.
New CRITICAL Threat: OpenSSH 'SSHole' Flaw
A critical security flaw in OpenSSH allows attackers to gain unauthorized access to accounts that do not have a password set, enabling potential root access and system compromise.
New HIGH Threat: WordPress Core Race Condition (CVE-2026-119977)
A high-severity Time-of-check Time-of-use (TOCTOU) race condition in WordPress Core is being actively exploited in the wild to allow unprivileged remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Vulnerability (CVE-2026-58115)
A max-severity vulnerability in Node-RED is being actively exploited to execute unauthorized commands on exposed systems and deploy Linux malware, including bots and webshells, within operational technology environments.
New HIGH Threat: WordPress Core TOCTOU Vulnerability (CVE-2026-119977)
A high-severity race condition vulnerability in WordPress Core that allows unauthenticated remote attackers to execute code on the server.
New CRITICAL Threat: Node-RED Malware Campaign
Attackers are actively exploiting a critical vulnerability (CVE-2026-58115) in Node-RED to execute commands on exposed systems and deploy Linux bots and webshells.
New CRITICAL Threat: OpenSSH 'SSHole' Vulnerability
A recently disclosed security flaw in OpenSSH that allows unauthorized sign-ins to accounts that do not have a password set, enabling potential root access.
New HIGH Threat: Malicious Cursor Marketplace Extensions
Malicious extensions masquerading as legitimate Claude Code tools were distributed on the Cursor marketplace, designed to install persistent SSH backdoors on developer workstations.
New HIGH Threat: Microsoft Teams IT Support Impersonation
Threat actors are posing as IT support personnel on Microsoft Teams to deceive employees into providing credentials or facilitating unauthorized access to Active Directory Certificate Services (AD CS).