Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
9 / 9 results
criticalbug_reportVulnerabilityPEERSTITCH malware deployed on 500+ FortiGate firewalls via FortiManager
Fortinet FortiManager and 500+ managed FortiGate firewalls. Initial compromise via CVE-2024-47575 (FortiJump) on FortiManager FMG-Access service (TCP 541).
criticalbug_reportVulnerabilitySonicWall SMA 1000 SSRF flaw (CVE-2026-102255) exploited 135 times
SonicWall Secure Mobile Access (SMA) 1000 appliances. Patched in versions 12.4.3-03670 (platform-hotfix) and 12.5.0-03082 (platform-hotfix) released October 6, 2026. All prior versions vulnerable.
criticalbug_reportVulnerabilitySonicWall SMA1000 CVSS 10.0 pre-auth SSRF allows internal access
SonicWall SMA1000 appliances (models 6210, 7210, 8200v) running platform-hotfix versions 12.4.3-03526 and older, or 12.5.0-02952 and older. The critical flaw (CVE-2026-102255) affects the WorkPlace portal.
criticalbug_reportVulnerabilitySonicWall SMA1000 pre-auth SSRF and post-auth RCE require urgent patching
SonicWall SMA1000 series appliances. Specific affected versions not provided in source material. Two vulnerabilities: pre-authentication SSRF and post-authentication RCE.
criticalbug_reportVulnerabilityCheck Point VPN flaws allow unauthenticated RCE on gateways and mgmt servers
Check Point Security Gateway, Security Management Server, and Spark Firewall (all versions R80 through R82.10) configured with Remote Access VPN or Site-to-Site VPN.
criticalbug_reportVulnerabilitySonicWall SMA 1000 VPN zero-days exploited in chained attacks
SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances: models 6210, 7210, and 8200v running versions 12.4.3-03453 and older, or 12.5.0-02835 and older.
criticalbug_reportVulnerabilityMicrosoft Defender zero-day 'RoguePlanet' enables SYSTEM privilege escalation
Microsoft Defender on Windows systems. Specific affected versions not disclosed. Given Defender's deployment, scope includes enterprise endpoints, servers running Defender, and consumer Windows installations with default security configuration.
criticalbug_reportVulnerabilityCheck Point VPN auth bypass under active exploit via IKEv1 flaw
Check Point Remote Access VPN and Mobile Access deployments using deprecated IKEv1 protocol. Specific product versions not disclosed. Does not affect IKEv2 configurations.
highbug_reportVulnerabilityFortinet FortiClient EMS auth bypass exploited to deploy EKZ malware
Fortinet FortiClient Enterprise Management Server (EMS). Specific vulnerable versions not provided in available data. Authentication bypass vulnerability CVE-2026-35616 allows unauthorized access.