Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
20 / 20 results
criticalbug_reportVulnerabilityConnectWise shuts down Cloud Backup after M365 tenant compromise
ConnectWise Cloud Backup service (formerly SkyKick Cloud Backup) and connected Microsoft 365 tenants. All customers using the service for backup operations are affected.
criticalbug_reportVulnerabilitySAP Cloud SDK for Python CVSS 10 flaw leaks OAuth2 credentials to attacker
SAP Cloud SDK for Python versions below 0.45.2, 0.53.0 through 0.55.0, and all 0.36.x releases. Affects multi-tenant applications on SAP Business Technology Platform (BTP) using the SDK for authentication.
criticalbug_reportVulnerabilityCritical RCE flaw in Splunk Enterprise requires immediate patching
Splunk Enterprise (specific versions not disclosed in available data). Multiple vulnerabilities reported including at least one critical-severity remote code execution flaw.
highbug_reportVulnerabilityAhsayCBS backup flaws exploited to deploy XMRig miners and web shells
Ahsay AhsayCBS backup utility, all versions including the latest 10.3.4. Two vulnerabilities: CVE-2026-105133 (CVSS v4 5.5, improper authentication) and CVE-2026-105134 (CVSS v4 9.3, OS command injection).
criticalbug_reportVulnerabilityCritical file-access flaw in Atlassian Data Center products (self-hosted)
Atlassian self-hosted Data Center products: Confluence (< 9.2.26, 10.2.19), Jira Software/Service Management (< 9.12.40, 10.3.26, 11.3.12), Bitbucket (< 9.4.26, 10.2.8, 10.5.1), Bamboo (< 10.2.24, 12.1.12), Crowd (< 6.3.7, 7.0.3, 7.1.7, 7.2.4), Cruci…
criticalbug_reportVulnerabilityCitrix NetScaler ADC/Gateway RCE zero-days exploited in the wild
Citrix NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.37, 13.1-64.23, and corresponding FIPS/NDcPP releases. CVE-2026-88771 affects all deployments including default configurations.
highperson_alertThreat ActorShinyHunters Exploits Oracle PeopleSoft CVE via WAF Bypass
ShinyHunters is a financially motivated extortion gang known for data theft and extortion operations. The group targets organizations with vulnerable internet-facing applications to exfiltrate sensitive data and leverage it for ransom demands.
criticalbug_reportVulnerabilityCISA: Critical WSO2 auth bypass CVE-2026-5430 under active exploit
WSO2 enterprise products (specific versions not provided in source), Microsoft SharePoint (unspecified versions), and Adobe Commerce (unspecified versions).
highbug_reportVulnerabilityMicrosoft releases emergency patches for RDS failures after September updates
Windows 10 21H2/22H2, Windows 11 24H2/25H2/26H1, Windows Server 2019/2022/2025. Remote Desktop Services, Hyper-V (HCS-managed VMs with Plan9 shares), and USB Audio Class 1.0 devices with multichannel audio affected by September 2026 security updates.
criticalbug_reportVulnerabilitySAP patches two critical RCE flaws in Kernel and NetWeaver (CVSS 10.0)
CVE-2026-44756 (CVSS 10.0) affects SAP Kernel versions 7.22–9.20 and WEBDISP 9.16–9.20 across KRNL64NUC, KRNL64UC, and KERNEL components. CVE-2026-58240 (CVSS 9.8) affects SAP NetWeaver Message Server in Kernel 9.16, 9.18, 9.19, 9.20.
criticalbug_reportVulnerabilityCritical auth bypass and DoS flaws in Citrix NetScaler ADC/Gateway
Citrix NetScaler ADC and NetScaler Gateway versions 14.1 before 14.1-73.32, 13.1 before 13.1-63.21, NetScaler ADC FIPS before 14.1-73.32 FIPS, and FIPS/NDcPP before 13.1-37.277. CVE-2026-19489 affects devices with SIP ALG enabled on LSN groups.
criticalbug_reportVulnerabilityAdobe patches three CVSS 10.0 flaws in ColdFusion and Campaign Classic
Adobe ColdFusion 2025.0.x (prior to 2025.0.12) and 2023.0.x (prior to 2023.0.23); Adobe Campaign Classic v7 (prior to 7.4.4 build 9400) on-premise and hybrid deployments; Adobe Commerce (version not specified).
criticalbug_reportVulnerabilityAdobe Campaign Classic CVSS 10.0 flaw allows code execution without interaction
Adobe Campaign Classic (ACC) v7 versions prior to 7.4.3 build 9398 on Windows and Linux. The vulnerability affects the enterprise marketing automation platform used for customer campaign management.
criticalbug_reportVulnerabilityWriter AI platform session isolation flaw enables cross-tenant access
Writer enterprise AI platform. Specific affected versions not disclosed. Vulnerability impacts agent preview functionality allowing cross-tenant session token leakage and unauthorized access.
highbug_reportVulnerabilityCISA: Active exploitation of RCE flaw in Microsoft SharePoint
Microsoft SharePoint servers vulnerable prior to May 2024 security updates. Affects on-premises SharePoint deployments; unauthenticated remote code execution possible on unpatched systems.
criticalbug_reportVulnerabilityAdobe patches CVSS 10.0 flaws in ColdFusion and Campaign Classic
Adobe ColdFusion and Adobe Campaign Classic (specific versions not provided). Vulnerabilities include arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass.
criticalbug_reportVulnerability900+ Oracle E-Business Suite instances exposed, under active attack
Oracle E-Business Suite instances exposed to the internet (900+ confirmed). Specific vulnerable versions not disclosed; critical severity vulnerability being exploited.
highbug_reportVulnerabilityMicrosoft 365 Copilot SearchLeak allows data exfiltration via trusted link
Microsoft 365 Copilot Enterprise Search. All organizations using M365 Copilot with Enterprise Search enabled are potentially affected. Specific version details not disclosed.
criticalbug_reportVulnerabilitySearchLeak in Microsoft 365 Copilot enables data theft via crafted URLs
Microsoft 365 Copilot Enterprise. All organizations using Copilot with access to mailbox, OneDrive, or SharePoint data are potentially affected. Specific vulnerable versions not disclosed.
criticalbug_reportVulnerabilitySAP June 2026 patches fix 4 critical flaws in NetWeaver, Commerce Cloud
SAP NetWeaver and SAP Commerce Cloud products. Total of 15 vulnerabilities patched, including 4 critical-severity issues. Specific affected versions not disclosed in summary.