Miasma Supply Chain Malware Jumps to Go and GitHub Actions
Miasma malware expands from npm to Go and GitHub Actions. CVE-2026-12569 Windchill RCE hits KEV. CL-STA-1062 espionage targets SE Asia governments.
Posts
Cisco SD-WAN Zero-Day CVE-2026-20245 — Root for 2 Months
CVE-2026-20245 gave attackers root on Cisco SD-WAN routers for two months pre-patch. Plus CVSS 9.8 Lantronix OT flaw and 27M credentials recovered.
Cisco Unified CM Exploited — CVE-2026-20230 SSRF
CVE-2026-20230 SSRF in Cisco Unified CM exploited days after PoC. Mistic RAT feeds six ransomware gangs. Klue supply chain breach hits LastPass.
Social Engineering Attacks: The 5 Failures Behind 2026's Worst Breaches
Six months into 2026 and the breach scoreboard is brutal: 22 million Aflac records, 30 million students locked out during finals, the FBI's own surveillance sys
FortiBleed Attribution — Russian IAB, 110M Credentials
Russian IAB behind FortiBleed siphoned 110M VPN credentials since February. FFmpeg PixelSmash RCE hits media servers. Squidbleed leaks cleartext creds.
AryStinger Botnet — 4,300 Routers as Recon Proxies
AryStinger botnet turns 4,300 legacy routers into recon proxies. Gravity SMTP plugin exploit harvests WordPress API keys.
Splunk Enterprise RCE Exploited — CVE-2026-20253
CVE-2026-20253 Splunk RCE exploited in the wild with a Sunday CISA deadline. Accenture buys Dragos for $4.1B. FortiBleed hits 86K devices.
FortiBleed Dumps 73K VPN Credentials — CVE-2026-48907
FortiBleed leaks VPN credentials for 73,000 FortiGate devices. F5 patches critical NGINX RCE flaws. Cisco ISE root exploit patched.
144 Mastra npm Packages Hijacked — CVE-2026-48907
144 Mastra AI npm packages compromised via hijacked contributor account. CVE-2026-48907 Joomla JCE CVSS 10.0 actively exploited.
Post-Quantum Cryptography: NIST Standards and Quantum Threats
Right now, somewhere, an adversary is copying your encrypted VPN traffic. They can't read it today. They're saving it — for the day a quantum computer can crack