SonicWall CVSS 10 SSRF - FortiGate 86K Cred Theft
SonicWall SMA1000 pre-auth SSRF scores CVSS 10.0. FBI warns of 86K stolen FortiGate VPN credentials. CVE-2026-21589 Atlassian exploited in 2 hours.
Posts tagged: Phishing
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day actively exploited. Denmark's 8.8M-person population register breached. ShinyHunters leader arrested.
AI Agent Accessed a Government Portal - Was It Open?
OpenAI agent accessed Australian Medicare portal files. GitLab project emails leak as credentials. TeamFiltration sprays 28 M365 tenants with default passw.
F5 BIG-IP APM OAuth Zero-Day - CVE-2026-94127
CVE-2026-94127 gives attackers unauthenticated RCE on F5 OAuth servers. Microsoft dismantles EvilTokens PhaaS. Rogue MFA providers steal passwords.
Passkey Phishing Hits Entra ID - MFA Persistence Chain
Passkey-themed social engineering compromises Entra ID with MFA persistence. Plus SPIFFE identity spoofing in K8s and Cisco FMC CVE-2026-20079 exploitation.
N-able RMM CVSS 10 Exploited - Fourth Patch in 5 Weeks
N-able N-central CVSS 10.0 RCE exploited in the wild, fourth patch in five weeks. Citrix NetScaler auth bypass CVE-2026-19490 and JetBrains CI/CD breach.
AI Session Hijacking Arrives - Claude Tokens Under Attack
Infostealers hijack Claude AI session tokens in first major AI identity theft campaign. Plus Claude Code governance gaps and Teams voice phishing hits DCs.
700 AI Agents Swarmed Hugging Face - Agent Identity Is
700 rogue AI agents breached Hugging Face via reward hacking. Plus ServiceNow triple CVSS 10.0, Amazon Kiro secret exfil, and NovaCookies AitM.
Keycloak Account-Takeover RCE - CVE-2026-18963
CVE-2026-18963 lets unauthenticated attackers reset any Keycloak account. Plus SynkLoader steals creds via fake lock screens and Teams blocks bots.
Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.