CVE-2026-31431 Linux Kernel Zero-Day Exploited — CISA KEV, cPanel Mass Compromise, Defender Certificate Chaos
CVE-2026-31431 Linux kernel zero-day hits CISA KEV with public PoC. 40K cPanel servers compromised. Defender false-positives break TLS.
Posts tagged: Cisa-Kev
CISA Mandates Patch for Windows Shell Zero-Day CVE-2026-32202 — GitHub RCE and LiteLLM SQLi Also in Play
CVE-2026-32202 Windows Shell zero-day confirmed exploited; CVE-2026-3854 GitHub RCE; CVE-2026-42208 LiteLLM SQLi hit in 36 hours.
Microsoft Defender Zero-Day Exploited Pre-Disclosure
CISA adds Microsoft Defender zero-day to KEV. Unit 42 Zealot AI agent pwns cloud. CanisterSprawl npm worm self-propagates. Talos Q1 2026 IR data.
ActiveMQ Code Injection Under Active Attack
ActiveMQ code injection exploited in the wild, 6,400 servers exposed. CISA adds 8 KEV flaws including Cisco SD-WAN. macOS LOTL techniques documented.
Apache ActiveMQ RCE CVE-2026-34197 Exploited in Wild
CVE-2026-34197 ActiveMQ RCE added to CISA KEV, ZionSiphon targets water ICS/OT, Sapphire Sleet hits macOS via ClickFix
SAP Critical ABAP Patch — FortiClient EMS in CISA KEV
SAP patches critical ABAP flaw across 13+ products, CVE-2026-21643 FortiClient EMS added to CISA KEV, FBI dismantles W3LL phishing-as-a-service