critical
65
high
35
medium
0
low
0
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability that allows remote attackers to crash mobile devices or disrupt cellular service by sending a specially crafted text message.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing unauthorized access and control.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware was recently tied to a significant data breach at Pedigo Products Inc., where attackers infiltrated systems and claimed to have stolen 1.3 terabytes of sensitive data.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability that allows remote attackers to crash phones or disrupt cellular service by sending a specially crafted SMS message.
New CRITICAL Threat: Ivanti Gateway Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing unauthorized access and control.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware was recently tied to a significant data breach at Pedigo Products Inc., where attackers reportedly exfiltrated 1.3 terabytes of data and forced the shutdown of internal systems.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability allows remote attackers to disrupt cellular service or crash unpatched mobile devices by sending a specially crafted text message.
New CRITICAL Threat: Ivanti Gateway Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing unauthorized access and control.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware was recently tied to a significant data breach at Pedigo Products Inc., where attackers reportedly exfiltrated 1.3 terabytes of sensitive data after infiltrating the company's systems.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New CRITICAL Threat: PHP2Shell (CVE-2026-109618, CVE-2026-109619)
A set of remote code execution vulnerabilities in PHP that are being actively exploited by attackers to gain unauthorized access to servers, often within hours of disclosure.
New CRITICAL Threat: Interlock Ransomware
A ransomware group actively targeting manufacturing and healthcare organizations, involving data exfiltration and the encryption of critical systems to force extortion payments.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Chain (CVE-2026-111357, CVE-2026-118527)
A chain of vulnerabilities in Ivanti Connect Secure appliances that allows unauthenticated attackers to achieve remote code execution with root privileges and perform privilege escalation.
New HIGH Threat: Vishing Attacks on Law Firms
Cybercriminals are actively using vishing (voice phishing) to impersonate IT support staff, successfully breaching multiple top-tier Canadian law firms to gain unauthorized access to internal systems.
New CRITICAL Threat: Interlock Ransomware
The Interlock ransomware group has been actively targeting organizations, including a recent breach at a medical equipment manufacturer where they claimed to have exfiltrated 1.3 terabytes of data.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA recently added these two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication for critical functions and the generation of predictable identifiers, allowing unauthorized access and control.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New HIGH Threat: Vishing Attacks on Law Firms
Cybercriminals are actively using vishing (voice phishing) to impersonate IT support staff, successfully breaching multiple top-tier Canadian law firms to gain unauthorized access to internal systems.
New CRITICAL Threat: Interlock Ransomware
The Interlock ransomware group has been actively targeting organizations, including a recent breach at a medical equipment manufacturer where they claimed to have exfiltrated 1.3 terabytes of data.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA recently added these two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication for critical functions and the generation of predictable identifiers, allowing unauthorized access and control.
New HIGH Threat: C3RB3R Ransomware
This ransomware strain is actively targeting Network-Attached Storage (NAS) devices, posing a significant risk to data availability and integrity for organizations relying on these storage solutions.
New CRITICAL Threat: PHP Remote Code Execution (RCE) Vulnerabilities
Emergency security updates were released to address critical flaws in PHP that allow unauthenticated remote code execution on affected web servers, a trend contributing to the rapid exploitation seen throughout 'Black October'.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Chain (CVE-2026-111357, CVE-2026-118527)
Attackers are chaining these vulnerabilities to achieve unauthenticated remote code execution and privilege escalation on Ivanti Connect Secure appliances, leading to credential theft and access to sensitive data like Active Directory passwords.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New CRITICAL Threat: PHP Remote Code Execution (RCE) Vulnerabilities
Emergency security updates were released to address two critical vulnerabilities in PHP that allow unauthenticated remote code execution on affected web servers, a continuation of the 'Black October' trend of PHP-related exploits.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing unauthorized access and control.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware was recently identified in a significant data breach at Pedigo Products Inc., where attackers infiltrated systems and claimed to have exfiltrated 1.3 terabytes of sensitive data.
New CRITICAL Threat: PHP Remote Code Execution (RCE) Vulnerabilities
Emergency security updates were released to address two critical vulnerabilities in PHP that allow unauthenticated remote code execution on affected web servers, a continuation of the 'Black October' trend of PHP-related exploits.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing unauthorized access and control.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware was recently identified in a significant data breach at Pedigo Products Inc., where attackers infiltrated systems and claimed to have exfiltrated 1.3 terabytes of sensitive data.
New CRITICAL Threat: PHP Remote Code Execution (RCE) Vulnerabilities
Critical vulnerabilities in PHP that allow unauthenticated remote attackers to execute arbitrary code on web servers, often exploited rapidly following disclosure.
New CRITICAL Threat: Interlock Ransomware
A ransomware group actively infiltrating organizations to exfiltrate large volumes of sensitive data and encrypt systems, as recently observed in a breach at Pedigo Products Inc.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Exploits (CVE-2026-111357, CVE-2026-118527)
These vulnerabilities involve missing authentication for critical functions and predictable identifiers, allowing attackers to gain unauthorized access and control over Ivanti Connect Secure gateways.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability allows remote, unauthenticated attackers to crash mobile devices or disrupt cellular service by sending a specially crafted text message.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing attackers to gain unauthorized access and control over affected gateways.
New CRITICAL Threat: Interlock Ransomware
The Interlock ransomware group recently infiltrated Pedigo Products Inc., a medical equipment manufacturer, resulting in the theft of approximately 1.3 terabytes of sensitive data and the forced shutdown of internal systems.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability allows remote, unauthenticated attackers to crash mobile devices or disrupt cellular service by sending a specially crafted text message.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing attackers to gain unauthorized access and control over affected gateways.
New CRITICAL Threat: Interlock Ransomware
The Interlock ransomware group recently infiltrated Pedigo Products Inc., a medical equipment manufacturer, resulting in the theft of approximately 1.3 terabytes of sensitive data and the forced shutdown of internal systems.
New HIGH Threat: Vishing Attacks on Canadian Law Firms
Threat actors are actively using voice phishing (vishing) to impersonate IT support staff, successfully breaching four major Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) to gain unauthorized network access.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing attackers to gain unauthorized access and control over affected gateways.
New CRITICAL Threat: Interlock Ransomware
A ransomware group recently infiltrated Pedigo Products Inc., a medical equipment manufacturer, resulting in the theft of approximately 1.3 terabytes of sensitive data and the forced shutdown of internal systems.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: Vishing Attacks on Canadian Law Firms
Threat actors are actively using voice phishing (vishing) to impersonate IT support staff, successfully breaching four major Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) to gain unauthorized network access.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication and predictable identifiers, allowing attackers to gain unauthorized access and control over affected gateways.
New CRITICAL Threat: Interlock Ransomware
A ransomware group recently infiltrated Pedigo Products Inc., a medical equipment manufacturer, resulting in the theft of approximately 1.3 terabytes of sensitive data and the forced shutdown of internal systems.
New HIGH Threat: Vishing Attacks on Professional Services
Threat actors are using sophisticated voice phishing (vishing) techniques to impersonate IT support staff, successfully breaching multiple major law firms to gain initial access to corporate networks.
New CRITICAL Threat: Interlock Ransomware
The Interlock ransomware group is actively targeting organizations, recently breaching a medical equipment manufacturer and exfiltrating over a terabyte of sensitive data before attempting to disrupt systems.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
Two zero-day vulnerabilities in Ivanti Connect Secure VPN are being actively exploited in chained attacks. These flaws involve missing authentication for critical functions and the generation of predictable identifiers, allowing unauthorized access and control.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit for a recently patched Android vulnerability that allows remote attackers to crash unpatched phones or disrupt cellular service by sending a specially crafted text message.
New CRITICAL Threat: Interlock Ransomware
A ransomware group recently targeted Pedigo Products Inc., infiltrating their systems and reportedly stealing 1.3 terabytes of data before forcing a system shutdown.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA recently added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaws involve missing authentication for critical functions and the generation of predictable identifiers, allowing unauthorized access and control.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A vulnerability in Android that allows remote, unauthenticated attackers to crash unpatched mobile devices or disrupt cellular service by sending a specially crafted SMS message.
New CRITICAL Threat: Interlock Ransomware
A ransomware group actively infiltrating organizations, such as the recent breach at Pedigo Products, where they exfiltrated 1.3 terabytes of data and forced system shutdowns.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Chain (CVE-2026-111357, CVE-2026-118527)
Attackers are chaining these vulnerabilities to achieve unauthenticated code execution with root privileges on Ivanti Connect Secure appliances, leading to credential theft and unauthorized access to sensitive data like Active Directory queries.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A vulnerability in Android devices that allows remote, unauthenticated attackers to crash phones or disrupt cellular service by sending a specially crafted SMS message.
New CRITICAL Threat: Interlock Ransomware
A ransomware group actively infiltrating corporate networks to exfiltrate large volumes of sensitive data and encrypt systems, as recently observed in attacks against manufacturing entities.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Chain (CVE-2026-111357, CVE-2026-118527)
Attackers are chaining these vulnerabilities to achieve unauthenticated remote code execution and privilege escalation on Ivanti Connect Secure appliances, allowing for credential theft and access to sensitive system data.
New HIGH Threat: Vishing Attacks on Professional Services
A wave of sophisticated vishing (voice phishing) attacks has targeted top-tier law firms. Attackers impersonate IT support staff over the phone to trick employees into revealing credentials or granting remote access to internal systems.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware has been identified in recent attacks against manufacturing and healthcare entities, such as Pedigo Products. The group infiltrates networks to exfiltrate large volumes of sensitive data before deploying encryption to disrupt operations.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Chain (CVE-2026-111357 and CVE-2026-118527)
A chain of two zero-day vulnerabilities in Ivanti Connect Secure VPN appliances is being actively exploited in the wild. CVE-2026-111357 allows for privilege escalation via missing authentication, while CVE-2026-118527 involves predictable number generation. Attackers are using these to gain unauthorized access and perform credential theft.
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
New HIGH Threat: Vishing Attacks on Canadian Law Firms
Threat actors are actively using vishing (voice phishing) to impersonate IT support staff, successfully breaching multiple top-tier Canadian law firms to gain unauthorized access to internal systems.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware has been identified in recent attacks, including a significant breach of a medical and healthcare equipment manufacturer where 1.3 terabytes of data were reportedly stolen before systems were encrypted.
New CRITICAL Threat: Ivanti Connect Secure Zero-Day Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
Two zero-day vulnerabilities in Ivanti Connect Secure VPN are being actively exploited in chained attacks. CVE-2026-111357 involves missing authentication for a critical function, while CVE-2026-118527 relates to predictable number generation, allowing attackers to potentially escalate privileges or compromise the system.
New HIGH Threat: Copy Fail (CVE-2026-31431)
A Linux kernel privilege escalation flaw residing in a software dependency that allows a standard user to gain elevated system privileges.
New CRITICAL Threat: PHP2Shell (CVE-2026-109619)
A second critical remote code execution vulnerability in PHP, often chained with CVE-2026-109618, allowing unauthenticated attackers to gain control over affected systems.
New CRITICAL Threat: PHP2Shell (CVE-2026-109618)
A critical remote code execution vulnerability in PHP that is currently being actively exploited in the wild to compromise web servers.
New CRITICAL Threat: Interlock Ransomware
Interlock ransomware is actively being used to infiltrate organizations, such as medical equipment manufacturers, to exfiltrate large volumes of sensitive data and encrypt systems.
New HIGH Threat: Vishing Attacks on Canadian Law Firms
Threat actors are actively using voice phishing (vishing) to impersonate IT support staff, successfully breaching major Canadian law firms to gain unauthorized access to internal systems.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
These vulnerabilities in Ivanti Connect Secure allow for missing authentication and predictable identifier generation, enabling attackers to escalate privileges and potentially chain exploits for full system compromise.
New HIGH Threat: Microsoft Teams IT Support Impersonation
Attackers are posing as IT support personnel on Microsoft Teams to deceive employees into granting them remote control access to their workstations, facilitating data theft and further network compromise.
New HIGH Threat: Ivanti Connect Secure Privilege Escalation (CVE-2026-111357)
A missing authentication for a critical function vulnerability in Ivanti Connect Secure that allows a local authenticated attacker to escalate their privileges. It is currently being exploited in the wild as part of an attack chain.
New HIGH Threat: Vishing Attacks on Professional Services
A campaign involving voice phishing (vishing) where attackers impersonate IT support staff to gain unauthorized access to corporate networks, recently used to breach major law firms.
New CRITICAL Threat: PHP2Shell Remote Code Execution (CVE-2026-109618/109619)
A pair of critical remote code execution vulnerabilities in PHP that allow attackers to execute arbitrary commands on affected servers, often exploited within minutes of disclosure.
New CRITICAL Threat: Ivanti Connect Secure Predictable Identifiers Vulnerability (CVE-2026-118527)
A vulnerability in Ivanti Connect Secure involving the generation of predictable numbers or identifiers, which is currently being actively exploited in the wild.
New HIGH Threat: Android 'SMS of Death' (CVE-2026-58882)
A proof-of-concept exploit targeting a vulnerability in Android that allows an attacker to remotely crash a device or disrupt cellular service by sending a specially crafted SMS message.
New CRITICAL Threat: Google Brotli Unchecked Return Value (CVE-2026-111497)
A critical flaw in the Google Brotli library involving an unchecked return value that can be exploited by a remote unauthenticated attacker to trigger memory corruption, leading to remote code execution or privilege escalation.
New CRITICAL Threat: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
A set of remote code execution (RCE) vulnerabilities in PHP that allow unauthenticated attackers to execute arbitrary commands on a target server, often used to plant web shells for persistent access.
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: Vishing Attacks on Professional Services
Recent reports indicate that cybercriminals are successfully breaching top-tier law firms and professional organizations using vishing (voice phishing) techniques, where attackers impersonate IT support staff to gain initial access or credentials.
New CRITICAL Threat: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
These are two critical remote code execution (RCE) vulnerabilities in PHP that are being actively exploited in the wild. Attackers use these flaws to gain unauthorized control over servers, often pivoting to internal networks.
New CRITICAL Threat: Ivanti Connect Secure Vulnerabilities (CVE-2026-111357 and CVE-2026-118527)
CISA has added two vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-111357 allows local authenticated attackers to escalate privileges, while CVE-2026-118527 allows remote authenticated attackers to upload arbitrary files to the server.
New HIGH Threat: Emperador Ransomware
An active ransomware group currently targeting various industries, including the perfume and engineering sectors. The group exfiltrates sensitive client and financial data, threatening to leak it publicly unless a ransom is paid.
New CRITICAL Threat: Cisco SD-WAN Zero-Day Exploitation
A zero-day vulnerability in Cisco SD-WAN being actively exploited to steal keys. The activity has been linked to advanced threat actors, including those associated with the 'Silent Train' network, to gain persistent access to infrastructure.
New CRITICAL Threat: PHP2Shell (CVE-2026-109618, CVE-2026-109619)
A set of critical remote code execution (RCE) vulnerabilities in PHP that allow unauthenticated attackers to execute arbitrary code on affected servers. These flaws are currently seeing broad exploitation in the wild, including attacks against firewalls and government entities.
New HIGH Threat: Emperador Ransomware Campaigns
The Emperador ransomware group has been actively targeting organizations across various sectors, including the perfume and engineering industries, exfiltrating sensitive data and threatening public release to extort victims.
New CRITICAL Threat: Ivanti Connect Secure Vulnerability Chain (CVE-2026-111357, CVE-2026-104935, CVE-2026-118527)
A chain of vulnerabilities in Ivanti Connect Secure, including missing authentication for critical functions and predictable identifier generation, which allows local authenticated attackers to escalate privileges and potentially gain unauthorized access.
New CRITICAL Threat: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
Two critical remote code execution (RCE) vulnerabilities in PHP that allow attackers to execute arbitrary code on affected servers. These flaws have been actively exploited in the wild for over a week.
New HIGH Threat: Emperador Ransomware
The Emperador ransomware group is actively targeting organizations, including firms in the perfume and engineering sectors, exfiltrating sensitive data and threatening leaks.
New CRITICAL Threat: Drupal Commerce Core Authorization Bypass
A highly critical authorization bypass flaw in the Drupal Commerce core is being actively exploited by attackers to gain unauthorized access.
New CRITICAL Threat: GitLab RCE Vulnerability
A maximum-severity remote code execution (RCE) vulnerability in GitLab is currently being actively exploited against Alpine Linux environments.
Outdated OpenSSL Version Detected
Systems running OpenSSL versions vulnerable to CVE-2023-XXXX
Unpatched Log4j Vulnerability
Critical Log4Shell vulnerability detected in application servers
New HIGH Threat: Emperador Ransomware Attacks
The Emperador ransomware group has been observed targeting multiple international entities, including firms in Italy and Taiwan, to exfiltrate and threaten the release of sensitive client data.
New CRITICAL Threat: Qilin Ransomware Campaign
The Qilin ransomware group is actively targeting organizations, including software companies like W Interactive, threatening to leak exfiltrated sensitive data if ransom demands are not met.