CATEGORY
Category: Threat Digest
The daily threat intelligence digest: exploits, zero-days, breaches, crypto and AI incidents, grouped to avoid duplicate coverage and ranked by criticality, with sources for every entry.
-
Threat digest: 2026-09-27
ShinyHunters resumed mass exploitation of the patched Oracle PeopleSoft bug by encoding the URL path around WAF rules, the Bitget attacker moved about $83 million of unfreezable XRP,…
-
Threat digest: 2026-09-26
CISA moved a critical WordPress core flaw plus exploited SharePoint and MikroTik bugs onto its known exploited list, Kiteworks told customers worldwide to take servers offline ahead of…
-
Threat digest: 2026-09-25
CISA added a maximum severity WSO2 authentication bypass and an Adobe Commerce flaw to its exploited list, a hot wallet drain at Bitget topped $351 million in the…
-
Threat digest: 2026-09-24
Actively exploited chains lead the day: unauthenticated takeover of internet-exposed MikroTik routers, a Chinese actor using Chrome and Windows zero-days, and a card skimming campaign run at scale…
-
Threat digest: 2026-09-23
CISA added four exploited vulnerabilities to its Known Exploited Vulnerabilities catalog in a single day, led by a CVSS 10.0 Arista VeloCloud Orchestrator flaw with fixes still missing…
-
Threat digest: 2026-09-22
A cluster of compromised signing keys drained the Fetch.ai and NuNet bridges and minted hundreds of millions of tokens across the ASI Alliance ecosystem, CISA's deadline passed for…
-
Threat digest: 2026-09-21
A quiet weekend: Checkmarx detailed an npm supply chain campaign that hides its loader inside a btree library to slip past install-script blocks, researchers published two escapes from…
-
Threat digest: 2026-09-20
A six agency advisory attributed the WaterPlum job interview campaign to North Korea after at least 30,000 devices were infected and 10.71 million dollars in crypto was taken,…
-
Threat digest: 2026-09-19
CISA added three exploited Linux kernel flaws to its KEV catalog, Check Point and WordPress shipped critical fixes, Microsoft closed a maximum severity Azure AI Foundry bug, and…