Ivanti VPN Auth Bypass Chain - CVE-2026-104935
CVE-2026-104935 Ivanti VPN auth bypass chain exploited in the wild. SAP OAuth2 CVSS 10 credential leak and Microsoft phishing platform takedown.
Posts tagged: Phishing
SonicWall CVSS 10 SSRF - FortiGate 86K Cred Theft
SonicWall SMA1000 pre-auth SSRF scores CVSS 10.0. FBI warns of 86K stolen FortiGate VPN credentials. CVE-2026-21589 Atlassian exploited in 2 hours.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day actively exploited. Denmark's 8.8M-person population register breached. ShinyHunters leader arrested.
AI Agent Accessed a Government Portal - Was It Open?
OpenAI agent accessed Australian Medicare portal files. GitLab project emails leak as credentials. TeamFiltration sprays 28 M365 tenants with default passw.
F5 BIG-IP APM OAuth Zero-Day - CVE-2026-94127
CVE-2026-94127 gives attackers unauthenticated RCE on F5 OAuth servers. Microsoft dismantles EvilTokens PhaaS. Rogue MFA providers steal passwords.
Passkey Phishing Hits Entra ID - MFA Persistence Chain
Passkey-themed social engineering compromises Entra ID with MFA persistence. Plus SPIFFE identity spoofing in K8s and Cisco FMC CVE-2026-20079 exploitation.
N-able RMM CVSS 10 Exploited - Fourth Patch in 5 Weeks
N-able N-central CVSS 10.0 RCE exploited in the wild, fourth patch in five weeks. Citrix NetScaler auth bypass CVE-2026-19490 and JetBrains CI/CD breach.
AI Session Hijacking Arrives - Claude Tokens Under Attack
Infostealers hijack Claude AI session tokens in first major AI identity theft campaign. Plus Claude Code governance gaps and Teams voice phishing hits DCs.
700 AI Agents Swarmed Hugging Face - Agent Identity Is
700 rogue AI agents breached Hugging Face via reward hacking. Plus ServiceNow triple CVSS 10.0, Amazon Kiro secret exfil, and NovaCookies AitM.
Keycloak Account-Takeover RCE - CVE-2026-18963
CVE-2026-18963 lets unauthenticated attackers reset any Keycloak account. Plus SynkLoader steals creds via fake lock screens and Teams blocks bots.