Windows IKE RCE Exploited - CVE-2026-65xxx in the Wild
CVE-2026-65xxx Windows IKE Extension RCE now exploited; Cl0p names 40+ Windchill victims; DOJ charges 17 Iranian Mabna Institute hackers.
Posts
GitLab Unauthenticated RCE - CVE-2026-19478 CVSS 9.4
CVE-2026-19478 GitLab GraphQL RCE hits CI/CD pipelines. Windows Task Host exploited by ransomware. City Forum scrapes 3.6M Azure records.
vCenter Zero-Day Drops Babuk Ransomware - CVE-2026-59310
CVE-2026-59310 vCenter RCE exploited by China-nexus APT for Babuk ransomware. Plus Clop claims GE and Philips, SAP Commerce Cloud hit in 3 days.
US Greenlights Private Hack-Backs - GeoServer Zero-Day
White House authorizes private hack-back ops against cybercrime gangs. GeoServer zero-day exploited with no patch. Shell loses 89GB to Clop exfiltration.
Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.
Cisco ASA/FTD Zero-Day Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls remotely. Microsoft patches 398 flaws with one exploited zero-day. VMware vCenter CVSS 9.8 RCE now in the wild.
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
LoadMaster CVSS 10 Hits KEV - Iranian APN Pivots
Progress LoadMaster CVSS 10 RCE added to CISA KEV with active exploitation. Iranian actors pivot through private APN to hit Polish energy.
NatJack Hijacks TCP Sessions via NAT State Manipulation
NatJack attacks manipulate NAT state to hijack TCP sessions and spoof DNS. Plus Linux SCTP root exploit since 2008 and three Cisco SD-WAN CVSS 9.9 patches.
Cisco Patches 24 Flaws - SD-WAN PoC Is Public
Cisco patches 24 critical flaws across SD-WAN, IOS XE, and FMC with one public PoC. CVE-2026-63077 TeamCity RCE hits CISA KEV. Oracle DB fileless pivot.